QUESTIONS AND CORRECTLY WELL
DEFINED ANSWERS LATEST ALREADY
GRADED A+ 2025 – 2026
Testing, detection and identification occurs at least once
every ___ months and if automated monitoring is used,
personnel are notified via generated alerts - ANSWERS-3
months
How often are internal vulnerability scans? - ANSWERS-3
months
How often are external vulnerability scans? - ANSWERS-
Every 3 months
Internal penetration testing is performed per the entity
defined methodology, at least one every ____ months, after
any big upgrade or infrastructure change, by a qualified
, internal resource or 3rd party and organizational
independence of the tester exists - ANSWERS-12 months
External penetrations testing performed every ___ months.
- ANSWERS-12 months
Requirement #1 - ANSWERS-Install and Maintain Network
Security Controls
Requirement #2 - ANSWERS-Apply secure configurations to
all system components
Requirement #3 - ANSWERS-Protect Stored Account Data
Requirement #4 - ANSWERS-Protect cardholder Data with
strong cryptography
Requirement #5 - ANSWERS-Protect all systems and
networks from Malicious Software
Requirement #6 - ANSWERS-Develop and maintain secure
systems and software