PCI Network Security & Architecture

Question 1

What is the primary focus of PCI DSS Requirement 1?

Accepted Answer

Installing and maintaining network security controls

Answer

PCI DSS Requirement 1 specifically addresses the installation and maintenance of network security controls to protect the cardholder data environment.

Question 2

Under PCI DSS, what is required between the internet and the cardholder data environment (CDE)?

Accepted Answer

A DMZ with network security controls on both sides

Answer

PCI DSS requires a DMZ with network security controls between the internet and the DMZ, and between the DMZ and the CDE, providing layered protection.

Question 3

Which wireless encryption protocol does PCI DSS prohibit due to well-known cryptographic weaknesses?

Accepted Answer

WEP (Wired Equivalent Privacy)

Answer

WEP has fundamental cryptographic flaws that allow attackers to recover the encryption key within minutes, making it prohibited under PCI DSS.

Question 4

What must be included in network diagrams maintained for PCI DSS compliance?

Accepted Answer

All network connections and all cardholder data flows

Answer

PCI DSS requires comprehensive network diagrams showing all connections between system components and all cardholder data flows within the CDE.

Question 5

Under PCI DSS, which traffic rule principle must all network security controls protecting the CDE enforce?

Accepted Answer

Implicit deny — block all traffic not explicitly permitted

Answer

PCI DSS requires an implicit deny posture, meaning only explicitly authorized traffic is allowed and everything else is blocked by default.

PCI - Certified Payment Card Industry Specialist Practice Test

PCI - Certified Payment Card Industry Specialist Practice Test

PCI Network Security & Architecture