PCI SSCPCI DSSVulnerability MgmtEASYFree question
What is the OWASP Top 10 and its relevance to PCI DSS?
- A.A catalog of known payment card malware families used as a reference for scanning and reporting duties under PCI DSS
- B.A ranking of acquiring banks by fraud losses used as a benchmark for merchant levels and fee schedules in PCI DSS
- C.A list of the most critical web application security risks used as a baseline for secure coding and testing requirements in PCI DSS
- D.A scoring scale for vulnerability severity used as the threshold for scan failures and rescans in PCI DSS
Why C is correct
The OWASP Top 10 identifies the most critical web application security risks and serves as a baseline for PCI DSS secure development and testing requirements.
Know someone studying for PCI DSS? Send them this one.