Free Access PCI.PCIP3.0.v2022-07-23.q28 Practice Test (Page 4)

Question 11

All other merchants (not included in the descriptions for SAQs A, B, or C) and all service providers defined by a payment brand as eligible to complete an SAQ may be completing what SAQ?

A.SAQ A

B.SAQ B

C.SAQ D

D.SAQ C

Question 12

What are best practices for implementing PCI DSS into Business-as-Usual (BAU) Processes? (Select
ALL that apply)

A.Don't forget about people

B.Building security into business-as-usual helps organizations to maintain their PCI DSS compliant environment in between PCI DSS assessments

C.Focus on security, not on compliance

D.PCI DSS is not a once-a-year activity

Question 13

Intrusion-detection and/or intrusion-prevention techniques are NOT a requirement to monitor all traffic at the perimeter of the cardholder data environment as well as at critical points in the CDE and alert personnel to suspected compromises.

A.True

B.False

Question 14

When evaluating "above and beyond" for compensating controls, an existing PCI DSS requirement MAY be considered as compensating controls if they are required for another area, but are not required for the item under review