PCI SSCPCI DSSSecurity PoliciesEASYFree question
What does PCI DSS require in a wireless network policy?
- A.A policy addressing authorized wireless network use, testing for unauthorized access points, and security requirements for any wireless connectivity to the CDE
- B.A policy requiring a firewall between wireless networks and the CDE, annual vendor reviews, and registration of each employee phone
- C.A policy limiting wireless to guest networks, a ban on WEP and WPA2, and quarterly signal strength surveys by the QSA
- D.A policy requiring SSID broadcast to stay disabled, MAC filtering on each access point, and annual replacement of access points
Why A is correct
Wireless policies must address authorized use, unauthorized AP testing, and security requirements for any wireless connectivity that could reach the CDE.
Know someone studying for PCI DSS? Send them this one.