Question 1

Which of the following are requirements for using removable media? Select all that apply:

Options :

A : It must be handled by someone who cannot decrypt the cardholder data stored on it

B : Transfers to another person must be authorized and recorded

C : It must be securely destroyed after a single use

D : So it-s not a requirement to destroy it after a single use.

Answer: A,B

Question 2

Are all of the personalization network's devices required to be within an HSA (High Security Area) ?

Options :

A : No

B : Yes

Answer: B

Question 3

Which of the following security measures should be applied during the transmission of cardholder data? (Select all that apply)

Options :

A : Vendors should only accept transmissions from sources that have been previously agreed upon

B : Brands transmitting unencrypted data must be reported to the issuers

C : Vendors should only accept transmissions that are cryptographically signed to verify authenticity

D : Issuers transmitting unencrypted data must be reported to the payment brands

Answer: A,D

Question 4

Arrange the following events in the correct order:

Complete the AOC

Perform the on-site assessment

Contact the applicable brands to discuss the assessment

Complete the ROC

Submit documentation to the applicable brand

Options :

A : 3, 1, 2, 4, 5

B : 3, 2, 1, 4, 5

C : 5, 2, 4, 1, 3

D : 3, 2, 4, 1, 5

Answer: D