Free Preparation Discussions
MENU
PCI QSA_New_V4 Exam - Topic 5 Question 24 Discussion
Topic #: 5
What should the assessor verify when testing that cardholder data Is protected whenever It Is sent over open public networks?
Requirement for Secure Transmission:
PCI DSS Requirement 4.1 mandates that cardholder data sent over open public networks must be protected with strong cryptographic protocols. Accepting only trusted keys ensures data integrity and prevents unauthorized access.
Key Validation Practices:
Trusted keys and certificates are verified to ensure authenticity. Using untrusted keys compromises the security of the encrypted communication.
Prohibited Practices:
A/D: Configuring protocols to accept all certificates or lower encryption strength violates PCI DSS encryption guidelines.
B: Proprietary protocols are not inherently compliant unless they meet strong cryptographic standards.
Testing and Verification:
Assessors verify the implementation of trusted keys by examining encryption settings, reviewing certificate chains, and conducting tests to confirm only trusted connections are accepted.
Garry
2 days agoMalcom
7 days agoRenay
12 days agoMargo
17 days agoAlita
23 days agoValentin
28 days agoJulio
1 month agoMa
1 month agoSon
1 month agoWinifred
2 months agoMarcos
2 months agoMaira
2 months agoMertie
2 months agoAlishia
2 months agoChauncey
2 months agoJerrod
3 months agoElfrieda
4 months ago