Free PCI Security Standards Council QSA_New_V4 Exam Questions

Become PCI Security Standards Council Certified with updated QSA_New_V4 exam questions and correct answers

Page: 1 / 8

Total 40 Questions | Updated On: Jun 17, 2026

Add To Cart

Question 1

Which of the following is true regarding internal vulnerability scans?

A : They must be performed after a significant change.

B : They must be performed by an Approved Scanning Vendor (ASV).

C : They must be performed by QSA personnel.

D : They must be performed at least annually.

Answer: A

Question 2

Which of the following describes "stateful responses" to communication Initiated by a trusted network?

A : Administrative access to respond to requests to change the firewall Is limited to one individual at a time.

B : Active network connections are tracked so that invalid "response" traffic can be identified.

C : A current baseline of application configurations is maintained and any mis-configuration is responded to promptly.

D : Logs of user activity on the firewall are correlated to identify and respond to suspicious behavior.

Answer: B

Question 3

Which of the following is true regarding internal vulnerability scans?

A : They must be performed after a significant change.

B : They must be performed by an Approved Scanning Vendor (ASV).

C : They must be performed by QSA personnel.

D : They must be performed at least annually.

Answer: A

Question 4

Viewing of audit log files should be limited to?

A : Individuals who performed the logged activity.

B : Individuals with read/write access.

C : Individuals with administrator privileges.

D : Individuals with a job-related need.

Answer: D

Question 5