PCI SSCPCI DSSCompliance ReportingEASYFree question
What does a passing ASV scan report indicate?
- A.No vulnerabilities with CVSS 4.0 or higher were detected externally, meeting PCI DSS external scan requirements
- B.The network has no vulnerabilities, because passing four consecutive quarterly ASV scans removes the annual penetration testing obligation
- C.The network is immune to attacks, because v4.0 limits Requirement 1 to filtering at the internet perimeter and exempts all traffic that stays between internal network segments
- D.Complete PCI DSS compliance
Why A is correct
A passing ASV scan indicates no externally detectable vulnerabilities scored 4.0 or higher on CVSS, satisfying the external scanning requirement of PCI DSS.
Know someone studying for PCI DSS? Send them this one.