Unlike SAQ A, which comes with a total of 14 questions, A-EP contains 139 questions. Many of them will be unfamiliar to those that previously validated compliance with A version 2.0. Significantly SAQ A-EP, in line with PCI DSS version 3.0, clearly brings the web redirection servers into the scope of compliance.