NO.22 Requirement 11.3 – Implement a methodology for penetration testing is a best practice until June 30 2015

NO.23 The P2PE Standard covers:

NO.24 The use of two-factor authentication is NOT a requirement on PCI DSS v3 for remote network access originating from outside the network by personnel and all third parties.

NO.25 Requirement 2.2.2 and 2.2.3 cover the use of secure services, protocols, and daemons as required for the function of a system. Which of the following is considered secure?

NO.26 Requirement 8.2.3 states that passwords/phrases must contain both numeric and alphabetic characters and a minimum length of at least

NO.27 Which of the following lists the correct “order” for the flow of a payment card transaction?

NO.28 PCI compliance do not apply on Virtualized environments

NO.29 PCI DSS Requirement 1 covers:

NO.30 Use of a Qualified Integrator/Reeller (QIR):

NO.31 Entities involved in payment card processing via mobile devices (like a phone or tablet) can reduce the risks to the security of cardholder data by:

NO.32 When masking the PAN what is the maximum number of digits allowed to be displayed

NO.33 Users passwords/passphrases should be changed on a minimal of what interval to meet Requirement
8 .2.4?

NO.34 Information Supplements provided by the PCI SSC “supersede” or replace PCI DSS requirements

NO.35 To whom is Self-Assessment Question naire (SAQ) A intended for?

NO.36 The PCI DSS Requirement most closely associated with “Logging” is ____________

NO.37 To consider Compensating Controls, one of the following must exist that precludes implementing the stated control: (Select ALL that apply)

NO.38 Track and monitor all access to network resources and cardholder data is the ___________

NO.39 Merchants using P2PE solutions are still required to validate to PCI DSS

NO.40 Internal and external penetration tests should be performed_______________ to meet requirement
1 1.3.1 and 11.3.2

NO.41 Which statement is true regarding sensitive authentication data?