A city recreation portal will process cardholder data and must land in architectures and controls suited to that obligation. What drives the provisioning choices?
Select an answer to reveal the explanation.
Short Explanation
Taking credit cards is like handling cash in a vault—the building layout and cameras have to match the rules. PCI-style compliance shapes segmentation, logging, and controls more than button colors.
Full Explanation
Compliance obligations such as PCI DSS constrain how cardholder data environments are architected and which security controls must be provisioned—network segmentation, encryption, logging, and restricted access among them. Cost or UI preferences do not override those requirements.