PCI SSCPCI DSSEncryptionEASYFree question
What is IPsec and how is it used in PCI DSS?
- A.IPsec is a web application firewall that filters and logs HTTP requests, commonly deployed in front of payment pages to block injection
- B.IPsec is a protocol suite that encrypts and authenticates IP packets, commonly used in VPN tunnels to protect cardholder data during network transmission
- C.IPsec is a disk encryption suite that wraps and signs database volumes, commonly used on storage arrays to protect stored PANs
- D.IPsec is an authentication protocol that issues and validates tickets, commonly used in Windows domains to control administrator logins
Why B is correct
IPsec encrypts and authenticates IP-level communications, commonly used in VPN implementations to protect cardholder data during network transit.
Know someone studying for PCI DSS? Send them this one.