A sample of business facilities is reviewed during the PCI DSS assessment. What is the assessor required to validate about the sample? A) It includes a consistent set of facilities that are reviewed for all assessments. B) The number of facilities in the sample is at least 10 percent of the total number of facilities. C) Every facility where cardholder data is stored is reviewed. D) All types and locations of facilities are represented