QSA_New_V4 無料問題集「PCI SSC Qualified Security Assessor V4」

（A）Derive testing procedures and document them in Appendix E of the ROC.

（B）Document and maintain evidence about each customized control as defined in Appendix E of PCI DSS.

（C）Monitor the control.

（D）Perform the targeted risk analysis as per PCI DSS requirement 12.3.2.

（A）Certificates are logged so they can be retrieved when the employee leaves the company.

（B）A different certificate is assigned to each individual user account, and certificates are not shared.

（C）Certificates are assigned only to administrative groups, and not to regular users.

（D）Change control processes are In place to ensure certificates are changed every 90 days.

（A）The security protocol accepts only trusted keys.

（B）The security protocol accepts connections from systems with lower encryption strength than required by the protocol.

（C）The security protocol Is configured to accept all digital certificates.

（D）A proprietary security protocol is used.

（A）Security policy and procedure documents

（B）Application vendor manuals

（C）System configuration and parameter files

（D）Files that regularly change