PCI Compliance Quiz 2018

2.

Computers are to be locked when you are away from your work area?

True
False

Correct Answer

A. True

Explanation

It is important to lock computers when you are away from your work area to ensure the security and privacy of your data. Locking the computer prevents unauthorized access and protects sensitive information from being accessed or manipulated. It also helps to prevent any accidental or intentional changes or deletions to files and settings. Locking the computer is a simple and effective security measure that should be practiced to maintain the integrity of your work and protect your personal information.

Rate this question:

3.

Please check all that apply: Onsite personnel and visitors must:

Be identified and given a badge that distinguishes them from onsite personnel
Use of a visitor badge or state ID does NOT permit unescorted access to physical locations where Card Holder Data (CHD) is processed
Visitors or onsite employees ARE able to be unescorted in physical locations where Card Holder Data (CHD) is processed
Visitors or onsite employees are NOT required to have an identifying badge

Correct Answer(s)

A. Be identified and given a badge that distinguishes them from onsite personnel
A. Use of a visitor badge or state ID does NOT permit unescorted access to physical locations where Card Holder Data (CHD) is processed

Explanation

The correct answer is "Be identified and given a badge that distinguishes them from onsite personnel" and "Use of a visitor badge or state ID does NOT permit unescorted access to physical locations where Card Holder Data (CHD) is processed". This means that both onsite personnel and visitors must be identified and given a badge that sets them apart from regular onsite personnel. Additionally, even if a visitor has a visitor badge or state ID, they still cannot access areas where Card Holder Data is processed without being escorted.

Rate this question:

4.

Storage containers used for materials that are to be destroyed do not need to be secured (ex. not locked)?

True
False

Correct Answer

A. False

Explanation

All hard-copy materials must be stored in storage containers that are secure.

Rate this question:

5.

Personnel who have specific roles with EIS or Card Holder Data are required to participate in an annual training for PCI compliance?

True
False

Correct Answer

A. True

Explanation

Personnel who have specific roles with EIS or Card Holder Data are required to participate in an annual training for PCI compliance because it is crucial for them to understand the security protocols and measures necessary to protect cardholder data. This training ensures that they are aware of their responsibilities and are equipped with the knowledge to handle sensitive information securely. By participating in annual training, these personnel can stay updated with the latest security practices and help maintain PCI compliance within the organization.

Rate this question:

6.

How many requirements does PCI DSS have?

10
12
24
9

Correct Answer

A. 12

Explanation

PCI DSS, which stands for Payment Card Industry Data Security Standard, is a set of security standards that organizations must follow to protect cardholder data. The correct answer is 12 because PCI DSS has 12 main requirements that cover various aspects of data security, such as maintaining a secure network, protecting cardholder data, implementing strong access control measures, regularly monitoring and testing networks, and maintaining an information security policy. These requirements are designed to ensure that organizations handling cardholder data maintain a high level of security to prevent data breaches and protect sensitive information.

Rate this question:

7.

Please check all that apply; Best Practices for Credit Card Processing include;

Segregate duties when possible
Remember to never store payment card data in any form
Only allow employees who have a legitimate business need to access cardholder information
Each user needs their own user ID coupled with a secure password that is changed regularly
Restrict physical access to areas where credit card information is handled and stored

Correct Answer(s)

A. Segregate duties when possible
A. Remember to never store payment card data in any form
A. Only allow employees who have a legitimate business need to access cardholder information
A. Each user needs their own user ID coupled with a secure password that is changed regularly
A. Restrict physical access to areas where credit card information is handled and stored

Explanation

The best practices for credit card processing include segregating duties when possible, not storing payment card data in any form, only allowing employees with a legitimate business need to access cardholder information, each user having their own user ID coupled with a secure password that is changed regularly, and restricting physical access to areas where credit card information is handled and stored. These practices help to ensure the security and integrity of credit card transactions, protect cardholder information, and prevent unauthorized access and data breaches.

Rate this question:

8.

A potential security breach might include a User ID being given out or stolen.

True
False

Correct Answer

A. True

Explanation

A potential security breach refers to a situation where unauthorized access or disclosure of sensitive information occurs. In this case, if a User ID is given out or stolen, it can lead to a security breach as it allows unauthorized individuals to access a user's account or personal information. This can result in identity theft, unauthorized transactions, or other malicious activities. Therefore, the statement "A potential security breach might include a User ID being given out or stolen" is true.

Rate this question:

PCI Compliance Quiz 2018

Please check all that apply: How do I protect cardholder data?

Quiz Preview

Computers are to be locked when you are away from your work area?

Please check all that apply: Onsite personnel and visitors must:

Storage containers used for materials that are to be destroyed do not need to be secured (ex. not locked)?

Personnel who have specific roles with EIS or Card Holder Data are required to participate in an annual training for PCI compliance?

How many requirements does PCI DSS have?

Please check all that apply; Best Practices for Credit Card Processing include;

A potential security breach might include a User ID being given out or stolen.