220-1102 Question #234: Real Exam Question with Answer & Explanation

Question

A team of support agents will be using their workstations to store credit card data. Which of the following should the IT department enable on the workstations in order to remain compliant with common regulatory controls? (Choose two.)

Options

• AEncryption
• BAntivirus
• CAutoRun
• DGuest accounts
• EDefault passwords
• FBackups

Explanation

{"question_number": 2, "question": "A team of support agents will be using their workstations to store credit card data. Which of the following should the IT department enable on the workstations in order to remain compliant with common regulatory controls?", "correct_answer": "A. Encryption, B. Antivirus", "explanation": "Storing credit card data falls under PCI DSS (Payment Card Industry Data Security Standard) compliance. Encryption (A) is required to protect cardholder data at rest, ensuring that even if storage media is compromised, the data cannot be read. Antivirus (B) is a core PCI DSS requirement to protect systems from malware that could steal or expose cardholder data. AutoRun (C) is a security risk and should be disabled. Guest accounts (D) and default passwords (E) are explicitly prohibited by PCI DSS as they weaken access control. Backups (F) are a good practice but are not a primary PCI DSS compliance control for protecting data confidentiality.", "generated_by": "claude-sonnet", "llm_judge_score": 2}

No community discussion yet for this question.