PCI SSCPCI DSSVulnerability ManagementEASYFree question
Why does PCI DSS reference the OWASP Top 10?
- A.The OWASP Top 10 lists the approved encryption algorithms that payment applications must implement
- B.The OWASP Top 10 identifies the most critical web application security risks that applications must be protected against
- C.The OWASP Top 10 is the audit checklist QSAs must use for each application review
- D.The OWASP Top 10 sets the scan pass thresholds that ASVs must apply to external reports
Why B is correct
PCI DSS requires protection against common vulnerabilities, and the OWASP Top 10 provides a widely accepted list of the most critical web application security risks.
Know someone studying for PCI DSS? Send them this one.