The statement 'Open Access to Databases from the Internet is considered an automatic failure' is true.

The statement 'Open Access to Databases from the Internet is considered an automatic failure' is true.

• A. NEVER
• B. TRUE
• C. SOMETIMES
• D. FALSE

Answer: (B)

Publicly accessible databases create an immediate, exploitable path to cardholder data. PCI DSS requires that systems containing such data are not exposed directly to the Internet. When a database is reachable from anywhere on the Internet, external vulnerability scans treat that as a critical misconfiguration and typically mark it as an automatic failure. The proper approach is to block Internet access to the database ports and restrict access to trusted networks or via secure paths (VPN or jump hosts), with strong authentication and encryption in place. So, the statement is true.

Publicly accessible databases create an immediate, exploitable path to cardholder data. PCI DSS requires that systems containing such data are not exposed directly to the Internet. When a database is reachable from anywhere on the Internet, external vulnerability scans treat that as a critical misconfiguration and typically mark it as an automatic failure. The proper approach is to block Internet access to the database ports and restrict access to trusted networks or via secure paths (VPN or jump hosts), with strong authentication and encryption in place. So, the statement is true.