PCI SSCPCI DSSMonitoring TestingEASYFree question
How often must FIM comparisons be performed under PCI DSS?
- A.Quarterly, how often Requirement 11.2.1 requires testing for unauthorized wireless access points
- B.At least weekly
- C.Monthly
- D.Only during assessments, on the reasoning that changes to payment page scripts are monitored only where a content security policy is absent for assessments signed by an internal security assessor whenever a qualified security assessor is engaged
Why B is correct
PCI DSS requires performing FIM comparisons at least weekly to detect unauthorized changes to critical system files in a timely manner.
Know someone studying for PCI DSS? Send them this one.