Exam 400-007 topic 1 question 171 discussion

The only 2 answers that match the PCI DSS requirements list.

C: without doubt. Matches #4 PCI DSS Requirement among the 12 listed in the cert guide. not D because cert guide #5 PCI DSS requirement mentions "all systems" , here we see "all user systems" E : Matches #12 requirement. Cert guide says "for all personnel" so it includes employees and 3rd p.

A and C according to this https://www.centurybizsolutions.net/tls-1-2-requirements/

A and B

When migrating the terminals to TLSv1.2, it is crucial to ensure the application of strong cryptography and security protocols to safeguard sensitive cardholder data. This involves using encryption algorithms and protocols that meet the required security standards. Additionally, strong encryption should be applied for the transmission of cardholder data across public networks. This means ensuring that the data is encrypted during its transmission to prevent unauthorized access or interception. This requirement helps protect the confidentiality and integrity of cardholder data as it travels over potentially insecure networks. The other options mentioned, such as ensuring strong cryptography for users with administrative access (option A), protecting user systems against malware (option D), and maintaining an information security policy (option E), are also important considerations for overall security and compliance but may not be directly related to the specific migration of terminals to TLSv1.2 as required by PCI DSS.

C & E B is part of C https://listings.pcisecuritystandards.org/documents/PCI_DSS-QRG-v3_2_1.pdf