A company that processes credit card transactions is preparing for a PCI DSS assessment. The network team is reviewing firewall rules and discovers that the cardholder data environment (CDE) can communicate with the corporate network without restriction. What should the team do to align with PCI DSS requirements?

Implement firewall rules that restrict traffic between the CDE and corporate network to only necessary ports and services

Move the CDE to the corporate network to reduce complexity

Allow all traffic but log it for review

Remove all firewall rules to simplify the configuration

EC-CouncilNetwork Defense Essentials

Domain 2Objective 1

Regulatory Frameworks and Compliance Requirements NDE Practice Questions (Page 10)

Part of the Administrative and Physical Security Controls domain, which makes up ~15% of our current practice bank.

46questions here

10free pages

4concepts

Questions 46–46

46application · medium
A company that processes credit card transactions is preparing for a PCI DSS assessment. The network team is reviewing firewall rules and discovers that the cardholder data environment (CDE) can communicate with the corporate network without restriction. What should the team do to align with PCI DSS requirements?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Regulatory Frameworks and Compliance Requirements NDE Practice Questions (Page 10)

Questions 46–46

Keep studying — Administrative and Physical Security Controls