PCI DSS 11.4 pentesting in practice: internal, external, segmentation and retest
PCI DSS 4.0.1 Requirement 11.4 has several sub-requirements and your QSA checks each one. CDE scoping, internal and external testing, segmentation, retesting and tester independence.