PCI SSCPCI DSSCompliance ReportingEASYFree question
What is a QSA in PCI DSS?
- A.Quality Security Auditor-a card brand employee who inspects acquirer networks to confirm settlement files follow the PCI SSC schedule
- B.Qualified Scanning Assessor-a vendor approved by the PCI SSC to run external vulnerability scans of merchant websites
- C.Qualified Security Assessor-an independent security professional certified by the PCI SSC to assess compliance with PCI DSS
- D.Qualified Systems Administrator-a staff member who patches cardholder data environment servers on the merchant's behalf
Why C is correct
A QSA (Qualified Security Assessor) is an individual certified by the PCI SSC to perform PCI DSS assessments. QSAs work for QSA Companies (QSACs) approved by the PCI SSC.
Know someone studying for PCI DSS? Send them this one.