PCI SSCPCI DSSVulnerability ManagementEASYFree question
Why is patch management important under PCI DSS?
- A.Security patches fix known vulnerabilities that attackers can exploit to compromise systems in the CDE
- B.Patches provide the audit evidence the QSA uses to validate firewall rule reviews under Requirement 1
- C.Patching removes systems from assessment scope once they reach the latest vendor release
- D.Patches replace the need for anti-malware on systems running a vendor-supported operating system release
Why A is correct
Patch management addresses known security vulnerabilities. Without timely patching, attackers can exploit documented vulnerabilities to gain unauthorized access to systems processing or storing cardholder data.
Know someone studying for PCI DSS? Send them this one.