CompTIA Security+ (SY0-701) — Question 48

Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?

Answer options

• A. Fines
• B. Audit findings
• C. Sanctions
• D. Reputation damage

Correct answer: B

Explanation

The correct answer is B, as failing an internal PCI DSS compliance assessment typically leads to audit findings that need to be addressed to meet compliance standards. While fines, sanctions, and reputation damage may occur later, they are not the immediate outcomes of failing the assessment.