PCI SSCPCI DSSScoping SegmentationEASYFree question
What is the purpose of network segmentation in PCI DSS?
- A.To divide the network into VLANs by department, keeping finance, HR, and engineering traffic apart while each of the three remains inside the same PCI DSS scope
- B.To replace the need for firewalls, routing payment traffic through shared switches and access points rather than dedicated rule sets
- C.To limit the number of users who hold administrator accounts, assigning privileged roles and reviewing them against job duties
- D.To isolate the CDE from other networks, reducing the number of systems in scope for PCI DSS and limiting potential attack paths to cardholder data
Why D is correct
Network segmentation isolates the CDE from other network segments, reducing the scope of PCI DSS compliance by limiting the systems that must meet PCI DSS requirements and reducing attack vectors.
Know someone studying for PCI DSS? Send them this one.