Which practices does the course material identify as relevant to Payment Card Industry Data Security Standard (PCI DSS) compliance? Select ALL that apply.

### Why this is right - **Firewalls** help protect networks and systems from unauthorized connections. - **Data encryption** helps make payment data unreadable to parties without the appropriate key. - **Access restrictions** limit access to people or systems that need it. - **Regular security testing** helps identify weaknesses and check whether protections work. ### The concept The Payment Card Industry Data Security Standard (PCI DSS) includes requirements focused on securing networks, protecting data, and enforcing security policies. The material also notes that version 4.0 introduced enhanced obligations and customizable control implementation approaches. These practices support compliance, but each organization must determine and meet the requirements that apply to its payment environment. ### The other options There are no incorrect options in this question. Each listed practice is identified in the course material as a relevant security control. ### Terms - **Payment Card Industry Data Security Standard (PCI DSS)**: Security requirements for payment card data. - **Firewall**: A control that filters network traffic according to rules. - **Encryption**: Transforming data so it cannot readily be read without the appropriate key. ### Remember Payment-card protection combines network controls, data protection, restricted access, and testing.