Remote Lab Environment is a lab not maintained by the PA-QSA.

Remote Lab Environment is a lab not maintained by the PA-QSA.

• A. A lab that is used for production testing
• B. A lab not maintained by the PA-QSA
• C. A lab housed on PA-QSA premises
• D. A lab that tests only email systems

Answer: (B)

In PCI DSS discussions, a Remote Lab Environment refers to a testing lab whose security controls and management are not provided or maintained by the PA-QSA. The essential idea is about who is responsible for the lab’s environment, not where it is or what it tests. Therefore, the statement that describes it as a lab not maintained by the PA-QSA is the best fit. A production-testing lab describes its use, not who maintains it; a lab on PA-QSA premises would actually be maintained by the PA-QSA, contradicting the term; and a lab that tests only email systems specifies scope of testing, not maintenance responsibility.

In PCI DSS discussions, a Remote Lab Environment refers to a testing lab whose security controls and management are not provided or maintained by the PA-QSA. The essential idea is about who is responsible for the lab’s environment, not where it is or what it tests. Therefore, the statement that describes it as a lab not maintained by the PA-QSA is the best fit. A production-testing lab describes its use, not who maintains it; a lab on PA-QSA premises would actually be maintained by the PA-QSA, contradicting the term; and a lab that tests only email systems specifies scope of testing, not maintenance responsibility.