The ASV is ENCOURAGED to investigate inconclusive scans disputed by the scan customer.

The ASV is ENCOURAGED to investigate inconclusive scans disputed by the scan customer.

• A. True
• B. False
• C. Not specified
• D. Optional

Answer: (B)

Inconclusive results mean the scanner couldn’t determine whether a vulnerability exists due to network conditions or scan limitations. The proper way to resolve this is to fix the underlying environment issues (like blocked ports, firewall rules, or rate limiting) and perform a re-scan. The Approved Scanning Vendor’s role is to conduct the scan and report the results, not to conduct an investigative review of disputes over inconclusive results. If a customer disputes an inconclusive result, the path is to re-scan after remediation and/or follow the card brands’ dispute resolution process, rather than an internal investigation by the ASV. So the statement is not correct.

Inconclusive results mean the scanner couldn’t determine whether a vulnerability exists due to network conditions or scan limitations. The proper way to resolve this is to fix the underlying environment issues (like blocked ports, firewall rules, or rate limiting) and perform a re-scan. The Approved Scanning Vendor’s role is to conduct the scan and report the results, not to conduct an investigative review of disputes over inconclusive results. If a customer disputes an inconclusive result, the path is to re-scan after remediation and/or follow the card brands’ dispute resolution process, rather than an internal investigation by the ASV. So the statement is not correct.