Which action demonstrates compliance with securing router configurations under 1.2.2?

• A. Router configurations are secured from unauthorized access.
• B. Router configurations are openly readable by all users.
• C. Router configurations are not backed up.
• D. Router configurations are routinely rotated daily.

Answer: (A)

Securing router configurations from unauthorized access is essential because these files contain sensitive details such as management credentials, access controls, and routing rules that determine how traffic is handled. If unauthenticated users can view or alter these configurations, they could pivot into the network, bypass security controls, or exfiltrate cardholder data. Demonstrating compliance with this aspect means you have proper access controls around who can read or modify router settings, and you manage those configurations securely.

This aligns with PCI DSS expectations for protecting network devices and their configurations: only authorized personnel should access configuration data, and changes should be controlled and auditable. By keeping router configurations private and protected, you reduce the risk of tampering or misconfiguration that could compromise the cardholder data environment.

The other options don’t fit as well. If router configurations are openly readable by all users, confidential information is exposed and the risk of misuse increases. Not backing up configurations creates a single point of failure—if a device fails or a misconfiguration occurs, you may lose essential recovery data. Routinely rotating configurations daily isn’t a standard security practice for this area and could create operational disruption without directly addressing securing access to the configuration data.