PCI SSCPCI DSSNetwork SecurityEASYFree question
What is the purpose of a DMZ in PCI DSS network architecture?
- A.To run anti-virus scanning on all traffic, which users may disable at will provided the outage is shorter than one business day
- B.To provide a buffer zone between public-facing systems and internal networks
- C.To host the primary database server
- D.To store encrypted cardholder data backups, for which Requirement 3.7.4 requires key changes at the end of each defined cryptoperiod
Why B is correct
A DMZ provides a controlled network segment between the public internet and internal trusted networks, limiting direct access to cardholder data environments.
Know someone studying for PCI DSS? Send them this one.