PCI SSCPCI DSSCompliance ReportingEASYFree question
What is a Self-Assessment Questionnaire (SAQ) in PCI DSS?
- A.A penetration test report
- B.A vulnerability scanning report, part of Requirement 6.3.1's mandate to identify new vulnerabilities and assign them risk rankings using industry-recognized sources
- C.A validation tool for merchants and service providers to self-assess their PCI DSS compliance
- D.A risk assessment document, which the standard requires to be re-issued only when the assessor changes
Why C is correct
The SAQ is a self-validation tool that allows eligible merchants and service providers to assess and report their own PCI DSS compliance status.
Know someone studying for PCI DSS? Send them this one.