Which of the following is a PCI DSS role that correctly matches 'QSA'?

• A. Qualified Internal Auditor
• B. Compliance Officer
• C. Security Analyst
• D. QSA - Qualified Security Assessor

Answer: (D)

The concept being tested is the official PCI DSS role definitions. QSA stands for Qualified Security Assessor, which is the formal title recognized by the PCI Security Standards Council. A QSA is an individual approved to conduct PCI DSS assessments for merchants and service providers, typically employed by a PCI-approved QSAC, and responsible for performing on-site evaluations, validating security controls, and issuing the Report on Compliance. The other options describe generic job titles that do not represent the PCI DSS designation, so they don’t fit the official role the acronym denotes. Therefore, the match is QSA — Qualified Security Assessor.