Which action is a PCI DSS Standard 1 requirement?

Which action is a PCI DSS Standard 1 requirement?

• A. Encrypt all emails
• B. Use vendor-default passwords
• C. Disable all backups
• D. Install and maintain a firewall configuration to protect cardholder data

Answer: (D)

Protecting cardholder data starts with controlling network traffic that can reach that data. PCI DSS Requirement 1 calls for installing and maintaining a firewall configuration to protect cardholder data. A firewall creates a boundary between trusted networks and untrusted networks, filtering traffic according to security rules so only permitted communications reach the cardholder data environment. This foundational control reduces the chance that external attackers can access sensitive data and supports stronger overall network security through segmentation and ongoing monitoring. The other options don’t provide that boundary protection: encrypting emails doesn’t address the network perimeter around cardholder data, vendor-default passwords weaken access controls, and disabling backups would undermine data recovery and availability. Thus, installing and maintaining a firewall configuration is the action that aligns with PCI DSS Standard 1.

Protecting cardholder data starts with controlling network traffic that can reach that data. PCI DSS Requirement 1 calls for installing and maintaining a firewall configuration to protect cardholder data. A firewall creates a boundary between trusted networks and untrusted networks, filtering traffic according to security rules so only permitted communications reach the cardholder data environment. This foundational control reduces the chance that external attackers can access sensitive data and supports stronger overall network security through segmentation and ongoing monitoring. The other options don’t provide that boundary protection: encrypting emails doesn’t address the network perimeter around cardholder data, vendor-default passwords weaken access controls, and disabling backups would undermine data recovery and availability. Thus, installing and maintaining a firewall configuration is the action that aligns with PCI DSS Standard 1.