PCI DSS Requirement Appendix A is intended for:

• A.Merchants with data center environments
• B.Shared hosting providers
• C.Any third party that stores, processes, or transmits cardholder data on behalf of another entity
• D.Issuing banks and acquirers

Comment: *

Name: *

Email: *

Verification: *

If virtualization technologies are used in a cardholder data environment:

• A.Virtualization technologies should not be used in the cardholder data environment
• B.Entities using virtualization technologies should complete SAQ C
• C.The virtualization technologies are included in scope for PCI DSS
• D.The virtualization technologies are not in scope for PCI DSS

Comment: *

Name: *

Email: *

Verification: *

Which statement is true regarding sensitive authentication data?

• A.Encrypt sensitive authentication data removes it from PC DSS scope
• B.Sensitive authentication data includes PAN and service code
• C.Sensitive authentication exists in the magnetic strip or chip, and is also printed on the payment card
• D.Sensitive data is required for recurring transactions

Comment: *

Name: *

Email: *

Verification: *

Information Supplements provided by the PCI SSC "supersede" or replace PCI DSS requirements

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *