Which is the focus of PCI DSS Requirement 6.5.4?

Which is the focus of PCI DSS Requirement 6.5.4?

• A. Buffer overflows
• B. Insecure communications
• C. Improper error handling
• D. Cross-site scripting (XSS)

Answer: (B)

This requirement focuses on protecting data in transit by ensuring secure communications for systems and applications that handle cardholder data. It emphasizes using strong encryption, up-to-date protocols, and proper authentication to prevent eavesdropping, tampering, or leakage as data moves between components, systems, and networks. Insecure communications is the best fit because it targets the risk of unprotected data being transmitted, a core concern when cardholder data is communicated across networks or between services. The other options describe common software vulnerabilities—like memory safety issues, improper handling that can reveal information, or web-specific flaws—that are important but not the specific focus of this requirement.

This requirement focuses on protecting data in transit by ensuring secure communications for systems and applications that handle cardholder data. It emphasizes using strong encryption, up-to-date protocols, and proper authentication to prevent eavesdropping, tampering, or leakage as data moves between components, systems, and networks. Insecure communications is the best fit because it targets the risk of unprotected data being transmitted, a core concern when cardholder data is communicated across networks or between services. The other options describe common software vulnerabilities—like memory safety issues, improper handling that can reveal information, or web-specific flaws—that are important but not the specific focus of this requirement.