Free PCI Security Standards Council Assessor_New_V4 Exam Questions

Become PCI Security Standards Council Certified with updated Assessor_New_V4 exam questions and correct answers

Page: 1 / 12

Total 60 Questions | Updated On: Mar 07, 2026

Add To Cart

Question 1

Which statement about the Attestation of Compliance (AOC) is correct?

A : There are different AOC templates for service providers and merchants

B : The AOC must be signed by both the merchant/service provider and by PCI SSC

C : The same AOC template is used for ROCs and SAQs

D : The AOC must be signed by either the merchant service provider or the QSA'ISA

Answer: C

Question 2

What would be an appropriate strength for the key-encrypting key (KEK) used to protect an AES 128-bit data-encrypting key (DEK)

A : DES256

B : RSA512

C : AES 128

D : ROT 13

Answer: C

Question 3

Which of the following is true regarding compensating controls?

A : A compensating control is not necessary if all other PCI DSS requirements are in place

B : A compensating control must address the risk associated with not adhering to the PCI DSS requirement

C : An existing PCI DSS requirement can be used as compensating control if it is already implemented

D : A compensating control worksheet is not required if the acquirer approves the compensating control

Answer: B

Question 4

PCI DSS Requirement 12.7 requires screening and background checks for which of the following?

A : All personnel employed by the organization

B : Personnel with access to the cardholder data environment.

C : Visitors with access to the organization s facilities

D : Cashiers with access to one card number at a time

Answer: B

Question 5

Which of the following describes the intent of installing one primary function per server?

A : To allow functions with different security levels to be implemented on the same server

B : To prevent server functions with a lower security level from introducing security weaknesses to higher -security functions on the same server

C : To allow higher-security functions to protect lower-security functions installed on the same server

D : To reduce the security level of functions with higher-security needs to meet the needs of lower-security functions

Answer: B

Page: 1 / 12

Total 60 Questions | Updated On: Mar 07, 2026

Add To Cart