Which statement is true regarding the presence of both hashed and truncated versions of the same PAN in an environment?

Hashing and Truncation

PCI DSS Requirement 3.4 mandates protecting stored PAN using methods like hashing and

truncation. If both versions coexist, controls must ensure they cannot be combined to reconstruct the

original PAN​​.

Incorrect Options

Option B: Truncation is unrelated to hashed PANs.

Option C: Correlation of hashed and truncated versions to identify the PAN violates PCI DSS

principles.

Option D: Coexistence of hashed and truncated PANs is permissible if proper controls are in place.

Thank you for your visit.