QSAs must retain work papers for a minimum of _______ years. It is a recommendation

for ISAs to do the same. - ANSWER-3

According to PCI DSS requirement 1, Firewall and router rule sets need to be reviewed

every _____ months. - ANSWER-6

At least ______________ and prior to the annual assessment the assessed entity:

 - Identifies all locations and flows of cardholder data to verify they are included in the

CDE

 - Confirms the accuracy of their PCI DSS scope

 - Retains their scoping docume...