Exam QSA_New_V4 Topic 2 Question 21 Discussion

Actual exam question for PCI SSC's QSA_New_V4 exam
Question #: 21
Topic #: 2
If disk encryption is used to protect account data, what requirement should be met for the disk encryption solution?

Suggested Answer: A Vote an answer

According toRequirement 3.5.1.2, whendisk-level encryptionis used (e.g., full disk encryption), access control must beseparate from the operating systemto prevent unauthorised users from bypassing controls by booting the system.
* Option A:#Correct. Disk encryption must useindependent authentication mechanisms.
* Option B:#Incorrect. Sharing authentication with the OSviolates independence.
* Option C:#Incorrect. Association with local accounts may not ensure separate access control.
* Option D:#Incorrect. Key storage within user accounts is not secure or compliant.
Reference:PCI DSS v4.0.1 - Requirement 3.5.1.2 and its Applicability Note.

by Bartley at Sep 30, 2026, 11:43 PM

Limited Time Offer

15%

Off

Get Premium QSA_New_V4 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10