PCI SSCPCI DSSVulnerability ManagementEASYFree question
Under PCI DSS, anti-malware solutions must be kept current by doing what?
- A.Replacing the anti-malware product with a new vendor each year, retaining scan logs, and notifying the acquirer after a detection event
- B.Maintaining current anti-malware signatures, engines, and performing periodic scans and active monitoring
- C.Updating signature files quarterly, running scans on systems that store PAN, and filing the detection reports with the card brands each quarter
- D.Disabling real-time protection during business hours, scheduling weekly scans on file servers, and sending the results to the QSA for review
Why B is correct
PCI DSS requires that anti-malware solutions are kept current with the latest signatures and engines, perform periodic scans, and provide active or real-time monitoring to detect and respond to malware.
Know someone studying for PCI DSS? Send them this one.