PCI ISA REAL EXAM QUESTIONS AND CORRECT ANSWERS WITH EXPERTISE FEEDACK.REVISED

PCI ISA REAL EXAM QUESTIONS AND CORRECT ANSWERS WITH EXPERTISE FEEDACK.REVISED When should keys be retired or replaced? When keys are deemed weakened, no longer needed, become suspected and/or compromised, a key custodian no longer works for the company. Archived cryptographic keys are only used for what purpose? decryption/verification purposes. What is masking? applies to displaying of information and implies that data can be accessed behind the scenes. What is truncation? applies to storage and implies the permanent and irrecoverable transformation of the original data. What is hashing? applies to storage uses a special cryptographic method that takes a block of data (PAN) and passes it through a one-way process to produce a block of encrypted data. It cannot be reversed to recover the original data. It eliminates the risks involved in managing and keep keys secure. How often should unnecessary stored data be purged? at least quarterly A user is locked out after _____ wrong attempts 6 If a session has been idle for _____ minutes, a user must re-authenticate to re-activate the terminal or session 15 mins Once a user account is locked out, it remains locked out for a minimum of _____ or _____ 30 mins or until a system administrator resets the account. Reviewing public-facing web applications via manual or automated application vulnerability security assessment tools or methods, at least ____ or ____ Annually and after any changes or all the time What are "shared services"? common system components that provide services to many system components across an organization such as domain name service and network time protocol