Network segmentation's effect on the scope of the cardholder data environment is:

Network segmentation's effect on the scope of the cardholder data environment is:

• A. Increases the scope.
• B. Reduces the scope.
• C. Has no effect.
• D. Eliminates all data.

Answer: (B)

Network segmentation creates a boundary around the systems that handle cardholder data, isolating them from the rest of the environment. By doing this, only the segmented portion is in PCI DSS scope, so the overall scope of the cardholder data environment is reduced. It doesn’t erase data, nor does it increase scope or eliminate everything automatically. For the reduction to hold in practice, the segmentation must be robust with proper controls and clearly defined data flows; weak segmentation can leave more systems in scope than intended.

Network segmentation creates a boundary around the systems that handle cardholder data, isolating them from the rest of the environment. By doing this, only the segmented portion is in PCI DSS scope, so the overall scope of the cardholder data environment is reduced. It doesn’t erase data, nor does it increase scope or eliminate everything automatically. For the reduction to hold in practice, the segmentation must be robust with proper controls and clearly defined data flows; weak segmentation can leave more systems in scope than intended.