PCI SSCPCI DSSAccess ControlEASYFree question
How must visitors to CDE areas be managed under PCI DSS?
- A.Visitors must sign a paper log at the front desk, and no escort is required for the rest of the visit
- B.Visitors must be authorized, escorted, identified by badges, and their access logged
- C.Visitors must wear a plain sticker with no name printed, and roam the building freely once inside
- D.Visitors must state their name at the door, and then proceed unescorted through the building corridors
Why B is correct
PCI DSS requires visitor authorization, escort at all times, distinguishable visitor badges, and maintaining a visitor log with name, firm, escort, and dates.
Know someone studying for PCI DSS? Send them this one.