PCI ISA Questions and Answers with Certified Solutions

For PCI DSS requirement 1, firewall and router rule sets need to be reviewed every _____________ months 6 months Non-console administrator access to any web-based management interfaces must be encrypted with technology such as......... HTTPS Requirements 2.2.2 and 2.2.3 cover the use of secure services, protocols and daemons. Which of the following is considered to be secure? SSH Which of the following is considered "Sensitive Authentication Data"? Card Verification Value (CAV2/CVC2/CVV2/CID), Full Track Data, PIN/PIN Block True or False: It is acceptable for merchants to store Sensitive Authentication after authorization as long as it is strongly encrypted? False When a PAN is displayed to an employee who does NOT need to see the full PAN, the minimum digits to be masked are: All digits between the first six and last four