Discuss APICS CPIM-8.0 Exam Topic 6 Question 23

Payment Card Industry Data Security Standard (PCI DSS) allows for scanning a statistical sample of the environment without scanning the full environment. Scanning a statistical sample has many advantages and disadvantages.

Which of the following is the MOST accurate set of advantages and disadvantages?

ALimited risk to production targets, rapid scan times, requires proof of image standardization, and one-offs systems are not scanned

BEasy for auditors to question, fastest scanning method, ideal for cloud environments, and not suitable for small organizations

CLimited to a single environment/platform, proves image standardization, random selection misses end-to-end applications, and slower than targeted scanning

DConfirmation of Configuration Management (CM), hand selection introduces confirmation bias, is ideal in operational technology environments, and requires about 10% of each environment/platform

Suggested Answer: A

Get Premium CPIM-8.0 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Anabel 2 days ago

I think scanning a statistical sample is risky.

Virgie 7 days ago

That's the dilemma, right? Different needs, different answers.

Frederica 12 days ago

But is it really suitable for all organizations?

Donte 17 days ago

I lean towards D for operational tech environments.

Mose 23 days ago

It's a tough choice, each option has its pros and cons.

Juan 28 days ago

True, but faster scans help in urgent situations.

Timothy 1 month ago

But can we ignore the one-offs? That's a big deal.

Kristian 1 month ago

I prefer A for its balance of speed and safety.

Jutta 1 month ago

D highlights confirmation bias, that's a concern.

Donte 2 months ago

I feel like C has a point about missing applications.

Frederica 2 months ago

B is interesting, especially for cloud setups.

Virgie 2 months ago

But what about the one-offs not scanned?

Mose 2 months ago

Option A seems solid. Limited risk is key.

Timothy 2 months ago

Agreed, but it saves time!

Juan 2 months ago

I think scanning a statistical sample is risky.

Colette 3 months ago

D seems interesting, but does 10% really cover everything we need?

Annamae 3 months ago

I disagree with B, cloud environments can be tricky with limited scans.

Allene 3 months ago

Wait, are we really okay with missing end-to-end applications? That sounds risky.

Caitlin 3 months ago

I think option C is spot on! Random selection can really overlook important stuff.

Micah 3 months ago

A statistical sample can save time, but it might miss critical vulnerabilities.

Jacklyn 4 months ago

I feel like option D might be correct since it mentions confirmation bias, which we covered in class, but I’m not clear on the 10% requirement.

Shawnee 5 months ago

I recall that random selection can miss critical applications, which makes me lean towards option C, but I’m unsure about the scanning speed comparison.

Luann 5 months ago

I think option B sounds familiar because we practiced questions about scanning methods in cloud environments, but I’m not convinced it’s the best choice.

Whitney 5 months ago

I remember discussing how statistical sampling can reduce the risk to production targets, but I'm not sure about the specifics of image standardization.

APICS CPIM-8.0 Exam - Topic 6 Question 23 Discussion