For wireless networks that transmit cardholder data, which practice is required?

For wireless networks that transmit cardholder data, which practice is required?

• A. Do not encrypt wireless transmissions.
• B. Use WEP for authentication.
• C. Use Bluetooth instead of Wi-Fi for cardholder data.
• D. Use IEEE 802.11i with strong encryption; WEP is prohibited.

Answer: (D)

Wireless networks that carry cardholder data must be protected with strong encryption. The proper approach is to implement IEEE 802.11i, which underpins WPA2 and provides robust AES-based encryption. WEP is outdated and insecure, and its use is prohibited for protecting cardholder data. This means ensuring the wireless traffic is encrypted with strong standards (like AES) rather than leaving it unencrypted or using weaker protocols. Bluetooth is not a substitute for Wi‑Fi in this context, and using it in place of a properly secured wireless network would not meet the requirement.

Wireless networks that carry cardholder data must be protected with strong encryption. The proper approach is to implement IEEE 802.11i, which underpins WPA2 and provides robust AES-based encryption. WEP is outdated and insecure, and its use is prohibited for protecting cardholder data. This means ensuring the wireless traffic is encrypted with strong standards (like AES) rather than leaving it unencrypted or using weaker protocols. Bluetooth is not a substitute for Wi‑Fi in this context, and using it in place of a properly secured wireless network would not meet the requirement.