6-38.1 Assessment and Audit Strategies

Question 1

Passive assessment or audit activity with minimal operation impact

Answer 1

Examination

Question 2

Potentially intrustive activity used to identify strengths and weaknesses

Answer 2

Testing

Question 3

Assessment approach that may reduce the risk of bias

Answer 3

Covert

Question 4

An assessment/audit targets a combination of on-prem and cloud based resources

Answer 4

Hybrid

Question 5

Contractual obligation that mandates merchants undergo periodic controls assessments

Answer 5

PCI/DSS