QUESTION: 141

What is the BEST method for securing credit card numbers stored temporarily on a file server prior to transmission to the downstream system for payment processing?

Masking the full credit card number
Encryption with strong cryptography
Truncating the credit card number
One-way hash with strong cryptography

Answer(s): B

Reveal Solution Next Question

QUESTION: 142

When removing a financial application system from production, which of the following is MOST important?

Media used by the retired system has been sanitized.
Software license agreements are retained.
End-user requests for changes are recorded and tracked.
Data retained for regulatory purposes can be retrieved.

Answer(s): D

Reveal Solution Next Question

In a 24/7 processing environment, a database contains several privileged application accounts with passwords set to "never expire." Which of the following recommendations would BEST address the risk with minimal disruption to the business?

Schedule downtime to implement password changes.
Introduce database access monitoring into the environment.
Modify the access management policy to make allowances for application accounts.
Modify applications to no longer require direct access to the database.

Answer(s): C

Reveal Solution Next Question