Isaca Exam CCOA Topic 5 Question 2 Discussion

The act of moving a payment card system to a separate network location is an example of network segmentation because:

Isolation for Security: Segregates sensitive systems from less secure parts of the network.

PCI DSS Compliance: Payment card data must be isolated to reduce the scope of compliance.

Minimized Attack Surface: Limits exposure in case other parts of the network are compromised.

Enhanced Control: Allows for tailored security measures specific to payment systems.

Other options analysis:

A . Redundancy: Involves having backup systems, not isolating networks.

C . Encryption: Protects data but does not involve network separation.

D . Centricity: Not a recognized concept in network security.

CCOA Official Review Manual, 1st Edition Reference:

Chapter 7: Network Segmentation and Isolation: Emphasizes segmentation for protecting sensitive data.

Chapter 9: PCI Compliance Best Practices: Discusses network segmentation to secure payment card environments.