PCI SSCPCI DSSScoping SegmentationEASYFree question
What are common methods to reduce PCI DSS scope?
- A.Disk encryption, strong passwords, antivirus deployment, and quarterly vulnerability scans of internal hosts
- B.Annual penetration testing, log retention, security awareness training, and a written information security policy
- C.Multi-factor authentication, file integrity monitoring, patch management, and a documented change control process
- D.Network segmentation, tokenization, P2PE, and outsourcing payment processing to PCI-compliant providers
Why D is correct
Scope reduction methods include network segmentation, tokenization (replacing PANs with tokens), P2PE (encrypting data from the point of interaction), and outsourcing to compliant providers.
Know someone studying for PCI DSS? Send them this one.