Exam QSA_New_V4 Topic 1 Question 10 Discussion

Actual exam question for PCI SSC's QSA_New_V4 exam
Question #: 10
Topic #: 1
What is the intent of classifying media that contains cardholder data?

Suggested Answer: A Vote an answer

Requirement 9.6.1mandates theclassification of mediaso that appropriatehandling, storage, and disposalprocedures are applied based on thesensitivity of the data. This ensures that media storing cardholder data is not treated the same as media containing non-sensitive content.
* Option A:#Correct. Classifying media enablesrisk-appropriate protections.
* Option B:#Incorrect. Movement schedules are not mandated.
* Option C:#Incorrect. Labeling is a recommended control but not the primary intent.
* Option D:#Incorrect. Destruction must bebased on data classification, not uniform timing.
Reference:PCI DSS v4.0.1 - Requirement 9.6.1.

by Jacob at Aug 09, 2026, 06:20 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10