nerdexam
EC-Council

EC0-350 · Question #233

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

The correct answer is A. At least once a year and after any significant upgrade or modification. See the full explanation below for the reasoning.

Question

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

Options

  • AAt least once a year and after any significant upgrade or modification
  • BAt least once every three years or after any significant upgrade or modification
  • CAt least twice a year or after any significant upgrade or modification
  • DAt least once every two years and after any significant upgrade or modification

How the community answered

(27 responses)
  • A
    78% (21)
  • B
    4% (1)
  • C
    7% (2)
  • D
    11% (3)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice