When Dealing with Compliance with the Payment Card Industry-Data Security

question 92

Multiple Choice

When dealing with compliance with the Payment Card Industry-Data Security Standard (PCI-DSS) , an organization that shares card holder information with a service provider MUST do which of the following?

• A) Perform a service provider PCI-DSS assessment on a yearly basis
• B) Validate the service provider's PCI-DSS compliance status on a regular basis
• C) Validate that the service providers security policies are in alignment with those of the organization
• D) Ensure that the service provider updates and tests its Disaster Recovery Plan (DRP) on a yearly basis

---

Definitions:

Marble

A metamorphic rock composed of recrystallized calcite or dolomite.

Quartzite

A very hard rock consisting chiefly of quartz grains joined by secondary silica that causes the rock to break across rather than around the grains; formed by metamorphism or by silica cementation of a quartz sandstone.

Slate

A compact, fine-grained, low-grade metamorphic rock that possesses slaty cleavage.

Hornfels

Hornfels is a metamorphic rock formed by the contact between mudstone or other clay-rich rock and a hot igneous body, characterized by its hardness and fine grain.