A team of support agents will be using their workstations to store credit card data. Which of the following should the IT department enable on the workstations in order to remain compliant with…

The correct answer is A. Encryption B. Antivirus. Storing credit card data falls under PCI DSS (Payment Card Industry Data Security Standard) compliance. Encryption (A) is required to protect cardholder data at rest, ensuring that even if storage media is compromised, the data cannot be read. Antivirus (B) is a core PCI DSS…

Security

Question

A team of support agents will be using their workstations to store credit card data. Which of the following should the IT department enable on the workstations in order to remain compliant with common regulatory controls? (Choose two.)

Options

AEncryption
BAntivirus
CAutoRun
DGuest accounts
EDefault passwords
FBackups

How the community answered

(55 responses)

A
80% (44)
C
4% (2)
D
2% (1)
E
4% (2)
F
11% (6)

Explanation

Storing credit card data falls under PCI DSS (Payment Card Industry Data Security Standard) compliance. Encryption (A) is required to protect cardholder data at rest, ensuring that even if storage media is compromised, the data cannot be read. Antivirus (B) is a core PCI DSS requirement to protect systems from malware that could steal or expose cardholder data. AutoRun (C) is a security risk and should be disabled. Guest accounts (D) and default passwords (E) are explicitly prohibited by PCI DSS as they weaken access control. Backups (F) are a good practice but are not a primary PCI DSS compliance control for protecting data confidentiality.

Topics

#Data Protection#Encryption#Antivirus#Regulatory Compliance

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice