What does it mean to implement only one primary function per server?

What does it mean to implement only one primary function per server?

• A. Web servers, database servers, and DNS should be implemented on separate servers
• B. All services can run on any server regardless of function
• C. Implement only one primary function per server
• D. Allow some servers to host multiple functions for efficiency

Answer: (C)

Dedicating each server to a single primary function reduces risk and makes security management clearer. When a server has only one role, such as handling web traffic, that server’s configuration, patches, monitoring, and access controls stay focused on that function. If that server were compromised or needed maintenance, the impact stays contained to that one role, making incident response easier and keeping other functions isolated. This also helps keep the cardholder data environment scoped and auditable, since each server’s purpose is straightforward and auditable. So, implementing only one primary function per server means each server is assigned a single role and shouldn’t host multiple core services. The other choices describe scenarios that mix functions or rely on broad flexibility, which increases complexity, makes containment harder, and expands the potential attack surface.

Dedicating each server to a single primary function reduces risk and makes security management clearer. When a server has only one role, such as handling web traffic, that server’s configuration, patches, monitoring, and access controls stay focused on that function. If that server were compromised or needed maintenance, the impact stays contained to that one role, making incident response easier and keeping other functions isolated. This also helps keep the cardholder data environment scoped and auditable, since each server’s purpose is straightforward and auditable.

So, implementing only one primary function per server means each server is assigned a single role and shouldn’t host multiple core services. The other choices describe scenarios that mix functions or rely on broad flexibility, which increases complexity, makes containment harder, and expands the potential attack surface.