Payment Card Industry Data Security Standard (PCI DSS) in Retail industry

Which of the following organizations provide the PCI standards for retail merchants?

• ISACA

• VISA

• Mastercard

• PCI Security Standards Council

An installation and maintenance of a firewall configuration to protect cardholder data by merchants is a requirement of which PCI compliance standard?

• PCI Level 1 Compliance

• PCI Level 2 Compliance

• PCI Level 3 Compliance

• PCI Level 4 Compliance

What is the requirement for Change Management to be PCI compliant for retail merchants?

• A documented change management process that includes change authorization, review and testing

• Enforce strict user authentication controls

• encrypted data transmission when transferring cardholder data

• Restrict physical access to cardholder data

Which of the following is NOT a credit card brand which Merchants need to be concerned about PCI compliance?

• VISA

• Discover

• MasterCard

• PayPal

Which one of these is not a requirement for merchants to be PCI compliant for retail shops?

• Secure stored cardholder data

• Build and maintain a secure network

• Restrict physical access to cardholder data

• Ensure a malware-free environment

What is the minimum requirement for Payment Card Industry Data Security Standard (PCI DSS) version 3.2 for retail merchants?

• Nine PCI DSS requirements are followed

• Sixteen PCI DSS requirements are followed

• Twelve PCI DSS requirements are followed

• Twenty PCI DSS requirements are followed

Which of the following is NOT a requirement of Access Control to be PCI compliant for retail merchants?

• Unique ID for each person with computer access

• Define the roles and responsibilities of those accessing cardholder data

• Restrict physical access to cardholder data

• Review logs for all system components

What are the Assessments and Audits' requirements for merchants to be compliant with PCI DSS?

• Perform regular vulnerability scans

• Conduct full review of policies, procedures, and processes

• Implement an annual internal audit and review

• Organize a Service Level Agreement with the customer's bank

Which of these is not a PCI compliance requirement for retail merchants?

• Protect stored cardholder data

• Ensure appropriate usage of encryption

• Provide tracking and monitoring of all access to cardholder data

• Track and monitor all access by external parties

What are the payment application requirements for PCI DSS compliance for retail merchants?

• All credit card associated applications must use strong encryption

• All online shopping applications must be regularly scanned for security vulnerabilities

• All applications must include a payment data protection agreement

• All paymentcard-related applications must be documented