C Section none Explanation ExplanationReference Detection and identification of

C Section: (none) Explanation Explanation/Reference: Detection and identification of wireless access points must occur at least quarterly and this requirement is for ALL locations including those where no authorized wireless technologies are deployed. Quarterly wireless scanning must be performed at all locations connected to the cardholder data environment.

QUESTION 62 The use of WEP as a security control was prohibited as of June 30, 2010 - true or false? A

View full document

Section: (none) Explanation Explanation/Reference: Requirement 4.1.1 applies security for wireless networks, including the use of industry best practices (such as I-”Triple-E” 802.11i ) for any wireless networks transmitting cardholder data or connected to the cardholder data environment. As of June 30 2010, WEP must never be used as a security control since it is not considered strong cryptography. If WEP is present in the environment, additional technologies must be implemented to provide the required level of security for both transmission and authentication. QUESTION 63 If virtualization is used in a CDE, PCI DSS requirements do not apply. B

View full document

Section: (none) Explanation Explanation/Reference: If virtualization technologies are used in a cardholder data environment, PCI DSS requirements apply to those virtualization technologies. Virtualization technology introduces new risks that may not be relevant to other technologies, and that must be assessed when adopting virtualization in cardholder data environments. QUESTION 64 Service providers can control or impact the security of the cardholder data? A

View full document

Section: (none) Explanation Explanation/Reference: QUESTION 65 What is the name of the organization accepting the payment card for payment during a purchase? A. Merchant B. Issuer C. AcquirerD.Payment Brand Network

Correct Answer: