Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

APICS CPIM-8.0 Exam - Topic 6 Question 23 Discussion

Payment Card Industry Data Security Standard (PCI DSS) allows for scanning a statistical sample of the environment without scanning the full environment. Scanning a statistical sample has many advantages and disadvantages.Which of the following is the MOST accurate set of advantages and disadvantages?
A) Limited risk to production targets, rapid scan times, requires proof of image standardization, and one-offs systems are not scanned
B) Easy for auditors to question, fastest scanning method, ideal for cloud environments, and not suitable for small organizations
C) Limited to a single environment/platform, proves image standardization, random selection misses end-to-end applications, and slower than targeted scanning
D) Confirmation of Configuration Management (CM), hand selection introduces confirmation bias, is ideal in operational technology environments, and requires about 10% of each environment/platform

APICS CPIM-8.0 Exam - Topic 6 Question 23 Discussion

Actual exam question for APICS's CPIM-8.0 exam
Question #: 23
Topic #: 6
[All CPIM-8.0 Questions]

Payment Card Industry Data Security Standard (PCI DSS) allows for scanning a statistical sample of the environment without scanning the full environment. Scanning a statistical sample has many advantages and disadvantages.

Which of the following is the MOST accurate set of advantages and disadvantages?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Pamela at May 02, 2026, 05:06 PM

Limited Time Offer

25%

Off

Get Premium CPIM-8.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Donte
3 days ago
I feel like C has a point about missing applications.
upvoted 0 times
...
Frederica
8 days ago
B is interesting, especially for cloud setups.
upvoted 0 times
...
Virgie
14 days ago
But what about the one-offs not scanned?
upvoted 0 times
...
Mose
19 days ago
Option A seems solid. Limited risk is key.
upvoted 0 times
...
Timothy
24 days ago
Agreed, but it saves time!
upvoted 0 times
...
Juan
29 days ago
I think scanning a statistical sample is risky.
upvoted 0 times
...
Colette
1 month ago
D seems interesting, but does 10% really cover everything we need?
upvoted 0 times
...
Annamae
1 month ago
I disagree with B, cloud environments can be tricky with limited scans.
upvoted 0 times
...
Allene
1 month ago
Wait, are we really okay with missing end-to-end applications? That sounds risky.
upvoted 0 times
...
Caitlin
2 months ago
I think option C is spot on! Random selection can really overlook important stuff.
upvoted 0 times
...
Micah
2 months ago
A statistical sample can save time, but it might miss critical vulnerabilities.
upvoted 0 times
...
Jacklyn
2 months ago
I feel like option D might be correct since it mentions confirmation bias, which we covered in class, but I’m not clear on the 10% requirement.
upvoted 0 times
...
Shawnee
4 months ago
I recall that random selection can miss critical applications, which makes me lean towards option C, but I’m unsure about the scanning speed comparison.
upvoted 0 times
...
Luann
4 months ago
I think option B sounds familiar because we practiced questions about scanning methods in cloud environments, but I’m not convinced it’s the best choice.
upvoted 0 times
...
Whitney
4 months ago
I remember discussing how statistical sampling can reduce the risk to production targets, but I'm not sure about the specifics of image standardization.
upvoted 0 times
...

Save Cancel