Which of the following can be sampled for testing during a PCI DSS assessment?
a. PCI DSS requirements and testing procedures.
b. Compensating controls.
c. Business facilities and system components.
d. Security policies and procedures.