Which of the following is a Special Note defined by the Program Guide when detected?

• A. When directory browsing on a web server is detected
• B. When POS software is detected
• C. When remote access software is detected
• D. When the environment behind load balancers cannot be shown

Answer: (B)

Special Notes in the PCI ASV Program Guide are used to flag conditions that require special handling during an external vulnerability scan. When POS software is detected, that situation triggers a Special Note. This is because POS environments often involve isolated devices or vendor-specific software that may not be fully testable by standard scanning tools, so the note ensures the assessor documents and accounts for these nuances—sometimes indicating the need for manual verification or adjusted scope. The other conditions listed—directory listing on a web server, detection of remote access software, or environments behind load balancers whose details can’t be shown—aren’t defined as Special Notes in this context, so they don’t carry the same formal flag.