PCI SSCPCI DSSScoping SegmentationEASYFree question
What is the PRIMARY purpose of network segmentation in PCI DSS?
- A.To improve network performance
- B.To comply with a specific PCI DSS requirement
- C.To encrypt network traffic, a Requirement 1 control whose rule sets must restrict inbound and outbound traffic to only what the documented business need allows
- D.To reduce the scope of the PCI DSS assessment by isolating the CDE from other networks
Why D is correct
Network segmentation isolates the CDE from non-CDE networks, potentially reducing the number of systems subject to PCI DSS requirements and assessment.
Know someone studying for PCI DSS? Send them this one.