PCI SSCPCI DSSNetwork SecurityEASYFree question
What is a DMZ (demilitarized zone) in network security?
- A.A backup data center location, as jump hosts used to administer the CDE are exempt from network security controls for SAQ C-VT merchants
- B.A physical room where servers are stored, since video surveillance on its own satisfies every physical access requirement in the standard
- C.An encrypted tunnel between two offices given that the standard treats a demilitarized zone as a substitute for a documented rule review
- D.A network segment that sits between trusted internal networks and untrusted external networks to provide an additional layer of security
Why D is correct
A DMZ is a network segment positioned between the internal network and external untrusted networks. It hosts public-facing services while preventing direct external access to the internal CDE.
Know someone studying for PCI DSS? Send them this one.