What is considered an 'open, public network' in PCI DSS?
- A.Networks including the internet, wireless technologies, Bluetooth, cellular technologies, satellite communications, and any network where data can potentially be intercepted
- B.Networks including the internet, private MPLS circuits, dedicated leased lines, and any internal VLAN that carries traffic between two cardholder data servers
- C.Networks including the internet, cloud provider backbones, shared colocation cages, and any segment that exposes a payment terminal to a wiring closet
- D.Networks including the internet, partner extranets, managed Wi-Fi hotspots, and any link where the acquirer holds a copy of the transmitted records
Why A is correct
Open public networks include the internet, wireless, Bluetooth, cellular, satellite, and any network where transmission interception is possible.
Know someone studying for PCI DSS? Send them this one.