What is the target migration completion date for SSL/early TLS in the documented plan?

• A. December 31, 2018
• B. January 1, 2018
• C. June 30, 2019
• D. June 30, 2016

Answer: (D)

The main idea is that SSL and early TLS are considered insecure and must be retired, with a concrete deadline set in the migration plan. In PCI DSS practice, organizations outline a target date to complete moving to TLS 1.2 or stronger. The documented plan specifies that migration to disable SSL/early TLS should be completed by June 30, 2016, reflecting the official deadline associated with deprecating these older protocols. This makes June 30, 2016 the correct target, as it aligns with the mandated timeline to eliminate vulnerable encryption and reduce exposure of cardholder data. Dates like the end of 2018 or mid-2019 would extend beyond the guidance that targets the 2016 deadline, and January 1, 2018 falls outside the established target as well.