What does PCI DSS penetration testing validate within the Cardholder Data Environment (CDE)?

PCI DSS penetration testing validates that segmentation controls, access protections, and system defenses effectively prevent unauthorized access to the Cardholder Data Environment. The goal is to confirm that cardholder data is properly isolated, and that attackers cannot move into sensitive systems from connected networks.