Valid Assessor_New_V4 Dumps shared by ExamDiscuss.com for Helping Passing Assessor_New_V4 Exam! ExamDiscuss.com now offer the newest Assessor_New_V4 exam dumps, the ExamDiscuss.com Assessor_New_V4 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com Assessor_New_V4 dumps with Test Engine here:
Which scenario meets PCI DSS requirements for restricting access to databases containing cardholder data?
Correct Answer: A
Explanation The PCI DSS requires that access to databases containing cardholder data is restricted to authorized users and applications, and that direct access to such databases is prohibited. According to the PCI DSS Requirement 7.1.2, "Restrict access to privileged user IDs to least privileges necessary to perform job responsibilities." Furthermore, according to the PCI DSS Requirement 8.3.1, "Implement multi-factor authentication for all non-console access into the cardholder data environment for personnel with administrative access." Therefore, the scenario that meets the PCI DSS requirements for restricting access to databases containing cardholder data is the one where user access to the database is only through programmatic methods, such as through an application interface that enforces authentication, authorization, and encryption. The other scenarios either allow direct access to the database, or do not limit the access to the least privileges necessary, or do not use multi-factor authentication for administrative access. References: [PCI DSS v3.2.1], Card Production Security Assessor - Logical - Credly
