Which of the Following Are Requirements That Must Be Configured

Multiple Choice

Which of the following are requirements that must be configured for PCI DSS compliance? (Choose two.)

A) Testing security systems and processes regularly
B) Installing and maintaining a web proxy to protect cardholder data
C) Assigning a unique ID to each person with computer access
D) Encrypting transmission of cardholder data across private networks
E) Benchmarking security awareness training for contractors
F) Using vendor-supplied default passwords for system passwords