PCI Network Security & Architecture

Question 1

What is the primary focus of PCI DSS Requirement 1?

Accepted Answer

Installing and maintaining network security controls

Answer

Encryption of stored cardholder data at rest

Answer

Restricting physical access to cardholder data

Answer

Tracking and monitoring all network access

Question 2

Under PCI DSS, what is required between the internet and the cardholder data environment (CDE)?

Accepted Answer

A DMZ with network security controls on both sides

Answer

A dedicated VPN tunnel encrypting all traffic

Answer

End-to-end encryption of all packets

Answer

A single stateful-inspection firewall

Question 3

Which wireless encryption protocol does PCI DSS prohibit due to well-known cryptographic weaknesses?

Accepted Answer

WEP (Wired Equivalent Privacy)

Answer

WPA3-Enterprise

Answer

WPA2 with AES-CCMP

Answer

802.1X with EAP-TLS

Question 4

What must be included in network diagrams maintained for PCI DSS compliance?

Accepted Answer

All network connections and all cardholder data flows

Answer

Only external-facing network components

Answer

Only servers that store cardholder data

Answer

All wireless networks and their connection to the CDE

Question 5

Under PCI DSS, which traffic rule principle must all network security controls protecting the CDE enforce?

Accepted Answer

Implicit deny — block all traffic not explicitly permitted

Answer

Allow all traffic and log exceptions

Answer

Source IP verification before permitting any traffic

Answer

Rate-limiting of all inbound connections

Question 6

What is the PCI DSS requirement regarding vendor default settings for newly deployed network devices?

Accepted Answer

All vendor-supplied defaults must be changed before deployment

Answer

Defaults may be kept if the device is behind the CDE perimeter

Answer

Vendor defaults must be documented and approved by a QSA

Answer

Changing defaults is only required for wireless devices

Question 7

How does network segmentation primarily benefit a PCI DSS compliance program?

Accepted Answer

It reduces the scope of the PCI DSS assessment

Answer

It eliminates the need to encrypt stored cardholder data

Answer

It permits the use of legacy security protocols within isolated segments

Answer

It satisfies all controls required under PCI DSS Requirement 6