PCI SSCPCI DSSCompliance ReportingEASYFree question
What does a passing ASV scan report indicate?
- A.No vulnerabilities with CVSS 4.0 or higher were detected externally, meeting PCI DSS external scan requirements
- B.No vulnerabilities with CVSS 7.0 or higher were detected internally, meeting the PCI DSS internal scan requirements
- C.No open ports were detected on any firewall, meeting the PCI DSS network segmentation requirements for Level 1 merchants
- D.No critical vulnerabilities were found by the QSA during on-site fieldwork, meeting PCI DSS penetration test requirements
Why A is correct
A passing ASV scan indicates no externally detectable vulnerabilities scored 4.0 or higher on CVSS, satisfying the external scanning requirement of PCI DSS.
Know someone studying for PCI DSS? Send them this one.