If an entity does not use wireless networking technology anywhere in their environment, what must the assessor do to validate PCI DSS Requirement 11.2 (Wireless access points are identified and monitored, and unauthorized wireless access points are addressed.) for the report on compliance (ROC)?

A) Select "In Place with CCW" in the ROC, and include a compensating control worksheet that describes how wireless is not used.
B) Perform the testing procedures for Requirement 11.2, and select "In Place" or "Not in Place" in the ROC as appropriate for the assessor's findings.
C) Inspect the environment to verify there is no wireless, select "N/A" for Requirement 11.2 in the ROC, and document that the entity does not use wireless.
D) Select "Not Tested" for Requirement 11.2 in the ROC, and document that the entity does not use wireless.



Answer :

Other Questions