Passwords for default accounts and default administrative accounts should be?

Passwords for default accounts and default administrative accounts should be?
A . Changed within 30 days after installing a system on the network.
B . Reset to the default password before installing a system on the network
C . Changed before installing a system on the network
D . Configured to expire in 30 days

View Answer

Answer: C

Explanation:

According to the PCI DSS v3.2.1 Quick Reference Guide1, passwords for default accounts and default administrative accounts should be changed before installing a system on the network. This is one of the requirements for preventing unauthorized access to cardholder data.