Requirements

Question 1

What is Requirement 1?

Answer 1

Install and maintain network security controls

Question 2

What is Requirement 2?

Answer 2

Apply Secure Configurations to all Network Components

Question 3

What is Requirement 3?

Answer 3

Protect Stored Account Data

Question 4

What is Requirement 4?

Answer 4

Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks

Question 5

What is Requirement 5?

Answer 5

Protect All Systems and Networks from Malicious Software

Question 6

What is Requirement 6?

Answer 6

Develop and Maintain Secure Systems and Software

Question 7

What is Requirement 7?

Answer 7

Restrict Access to System Components and Cardholder Data by Business Need to Know

Question 8

What is Requirement 8?

Answer 8

Identify Users and Authenticate Access to System Components

Question 9

What is Requirement 9?

Answer 9

Restrict Physical Access to Cardholder Data

Question 10

What is Requirement 10?

Answer 10

Log and Monitor All Access to System Components and Cardholder Data

Question 11

What is Requirement 11?

Answer 11

Test Security of Systems and Networks Regularly

Question 12

What is Requirement 12?

Answer 12

Support Information Security with Organizational Policies and Programs

Question 13

What are the 6 control objectives of PCI?

Answer 13

1. Build and maintain a secure network and systems
2. Protect account data
3. Maintain a vulnerability management program
4. Implement strong access control measures
5. Regularly monitor and test networks
6. Maintain an information security policy