PCI SSCPCI DSSScoping SegmentationEASYFree question
What is the most common technology used for network segmentation in PCI DSS?
- A.Password policies, which Requirement 12.1.2 requires to be reviewed at least once every twelve months and updated when the environment or risks change
- B.Anti-malware software, which Requirement 5.3.2 requires to perform periodic scans or continuous behavioural analysis of the systems it protects
- C.Firewalls and access control lists that restrict traffic between network segments
- D.Encryption
Why C is correct
Firewalls and ACLs are the primary technologies for network segmentation, controlling traffic flow between the CDE and other network segments.
Know someone studying for PCI DSS? Send them this one.