As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met? (Choose two.)

Requirement 8 of PCI DSS mandates that each individual with computer access be assigned a unique ID, preventing shared credentials and enabling accountability for all actions taken on cardholder data systems.

Encrypting transmission of cardholder data across open networks is Requirement 4, which falls under the 'Protect Cardholder Data' control objective - not 'Strong Access Control Measures'.

Validating PCI compliance at each business location is an organizational scoping consideration, not a standalone numbered PCI DSS requirement within the Strong Access Control Measures category.

Protecting stored cardholder data is Requirement 3, which belongs to the 'Protect Cardholder Data' control objective - a separate category from Strong Access Control Measures.

Requirement 7 of PCI DSS mandates restricting access to cardholder data on a need-to-know basis, ensuring that only authorized personnel with a legitimate business reason can access sensitive data.