The Attestation of Scan Compliance section includes the signature of the ASV qualified employee.

• A. FALSE
• B. NOT APPLICABLE
• C. TRUE
• D. UNKNOWN

Answer: (C)

The main point is that the Attestation of Scan Compliance must be signed by the ASV Qualified Employee to certify that the external vulnerability scan was conducted properly and in accordance with PCI DSS and PCI SSC rules. That signature is the formal accountability on the record, showing the ASV takes responsibility for the scan process, confirms the scan was performed for the correct scope and timeframe, and that the results are accurately reported. Without this signed attestation, the scan submission wouldn’t carry the official certification required by the program, which is why this piece is included. This makes the statement true: the Attestation of Scan Compliance includes the ASV qualified employee’s signature.