A PCI-adjacent payment helper subnet for a city cashiering integration must not freely reach the internet. Which network security design best meets sensitive-tier egress requirements?
Select an answer to reveal the explanation.
Short Explanation
Payment helpers do not get an open freeway ramp. Lock the outbound routes, allow only what the card flow needs, and inspect what still leaves—segment first, convenience later.
Full Explanation
Sensitive PCI-adjacent tiers require tightly controlled egress and segmentation: limited routes and security controls, plus inspection where required, rather than open internet egress. Co-mingling with public scrapers, broad public IPs, and disabled egress logging conflict with sensitive-tier network security design.