Eccouncil Exam 512-50 Topic 8 Question 65 Discussion

Actual exam question for Eccouncil's 512-50 exam

Question #: 65
Topic #: 8

When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

AHow many credit card records are stored?

BHow many servers do you have?

CWhat is the scope of the certification?

DWhat is the value of the assets at risk?

Show Suggested Answer

Suggested Answer: D

by Theresia at Mar 21, 2025, 11:31 PM

Limited Time Offer

25%

Off

Get Premium 512-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lakeesha

4 days ago

Wow, I didn't realize the number of servers was a relevant question. I was going to ask about their incident response plan.

upvoted 0 times

...

Ernie

7 days ago

PCI-DSS certification is just one piece of the puzzle. Asking about the scope is a great first step to understanding their overall security posture.

upvoted 0 times

...

Virgie

10 days ago

I agree. Just because they are PCI-DSS certified doesn't mean all their systems are secure.

upvoted 0 times

...

Aracelis

16 days ago

That's a good question. It's important to know what exactly is covered by the certification.

upvoted 0 times

...

Felicia

24 days ago

C) What is the scope of the certification?

upvoted 0 times

...