Which statement best describes the requirements for maintaining anti-virus mechanisms?

Which statement best describes the requirements for maintaining anti-virus mechanisms?

• A. All of the above
• B. Are kept current
• C. Perform periodic scans
• D. Generate audit logs which are retained per PCI DSS Requirement 10.7

Answer: (A)

Maintaining anti-virus mechanisms is about a continuous protection and visibility lifecycle. The software must stay current with the latest malware signatures and vendor updates so new threats are detected. It should perform periodic scans to catch infections that slip through real-time protection and to verify systems are clean. It should also generate audit logs of antivirus activity, updates, and scan results and retain those logs in accordance with PCI DSS Requirement 10.7 so you can monitor, investigate, and demonstrate compliance during audits. Putting these elements together covers the full spectrum of protective, preventive, and evidentiary requirements, so selecting all of the above is the most complete answer.

Maintaining anti-virus mechanisms is about a continuous protection and visibility lifecycle. The software must stay current with the latest malware signatures and vendor updates so new threats are detected. It should perform periodic scans to catch infections that slip through real-time protection and to verify systems are clean. It should also generate audit logs of antivirus activity, updates, and scan results and retain those logs in accordance with PCI DSS Requirement 10.7 so you can monitor, investigate, and demonstrate compliance during audits. Putting these elements together covers the full spectrum of protective, preventive, and evidentiary requirements, so selecting all of the above is the most complete answer.