Free PCI Security Standards Council PCIP_New_V4 Exam Questions

Become PCI Security Standards Council Certified with updated PCIP_New_V4 exam questions and correct answers

Page: 1 / 47

Total 235 Questions | Updated On: Mar 17, 2025

Add To Cart

Question 1

A merchant is undergoing penetration testing and are using a test/developer environment to ensure the penetration testers do not cause any outages to their live database. Which piece of live CHD (cardholder data) may not be used inside this test/developer environment?

A : PAN

B : Expiry Date

C : Any live CHD can be used in a test/developer environment

D : Customer Name

Answer: A

Question 2

You have just had an external scan performed and have been told you have 2 vulnerabilities that have been scored as medium. What should be done next?

A : The vulnerabilities should be remediated and another external scan should be completed

B : Nothing has to be remediated since the vulnerability is not high or critical

C : PCI DSS version 4 only requires internal scans for compliance. External scans are an optional area to improve security posture

D : The vulnerability should be marked as a false positive and the scan result should be added to documentation

Answer: A

Question 3

Requirement 1.2.2 discusses changes must be approved and managed in accordance with what requirement regarding change management?

A : 11.5.1

B : 6.5.1

C : 4.2.3

D : 12.2.1

Answer: B

Question 4

Which of the following is NOT a principle of the PCI DSS?

A : Regularly monitoring and testing networks to ensure security controls remain effective

B : Implementing access controls to restrict cardholder data access on a "need-to-know" basis

C : Using proprietary encryption algorithms for securing cardholder data

D : Protecting cardholder data during transmission over open, public networks through strong cryptography

Answer: C

Question 5

All internal scanning must be what?

A : Performed monthly

B : Require an ASV for internal scanning to match external scanning

C : Performed via authenticated scanning

D : Performed via unauthenticated scanning

Answer: C

Page: 1 / 47

Total 235 Questions | Updated On: Mar 17, 2025

Add To Cart