Questions

1. Which of the following runs counter to the requirements of PCI-DSS?
   1. Using the out-of-box settings for the firewall
   2. Installing a firewall to protect CDE systems from public systems (for example, the internet)
   3. Applying only vendor-supplied patches and updates
   4. Using custom passwords and settings
2. Which of the following is a recommended best practice under PCI DSS but could also be applied to all the other frameworks?
   1. Impose strict access controls.
   2. Maintain and evolve security awareness across the organization.
   3. Use third-party software to reduce the scope.
   4. Maintain training programs to ensure standards do not slip.
3. Which of the following is the best method for preventing exposure of cardholder data?
   1. Masking cardholder data
   2. Encrypting cardholder data
   3. Storing only the data required
   4. Truncating cardholder data
4. Which of the following name formats would not count as an...