PCI SSCPCI DSSNetwork SecurityEASYFree question
What is a DMZ (demilitarized zone) in network security?
- A.A dedicated subnet that holds the cardholder database and blocks outbound connections to the internet
- B.A monitoring appliance that mirrors internal traffic and forwards copies to a central log server
- C.A virtual private network tunnel that encrypts remote administrator sessions and terminates at the firewall
- D.A network segment that sits between trusted internal networks and untrusted external networks to provide an additional layer of security
Why D is correct
A DMZ is a network segment positioned between the internal network and external untrusted networks. It hosts public-facing services while preventing direct external access to the internal CDE.
Know someone studying for PCI DSS? Send them this one.