PCI SSCPCI DSSScoping SegmentationEASYFree question
What is the Cardholder Data Environment (CDE)?
- A.The network zone where payment applications run, and all firewalls, routers, and layer 3 switches that sit at the zone perimeter
- B.The physical data center that houses the payment servers, and all staff who hold access badges to its cages and server rooms
- C.The people, processes, and technology that store, process, or transmit cardholder data, and all systems connected to them
- D.The database tables that hold PANs, and all backup tapes and snapshots that copy them
Why C is correct
The CDE encompasses all system components (people, processes, technology) that handle cardholder data and connected components that could impact its security.
Know someone studying for PCI DSS? Send them this one.