312-50V9 Question #173: Real Exam Question with Answer & Explanation

The correct answer is D: Payment Card Industry Data Security Standards (PCI DSS). PCI DSS is the security standard specifically created by the payment card industry to protect cardholder data across all entities that store, process, or transmit credit card information.

Question

Which of the following guidelines or standards is associated with the credit card industry?

Options

AControl Objectives for Information and Related Technology (COBIT)
BSarbanes-Oxley Act (SOX)
CHealth Insurance Portability and Accountability Act (HIPAA)
DPayment Card Industry Data Security Standards (PCI DSS)

Explanation

PCI DSS is the security standard specifically created by the payment card industry to protect cardholder data across all entities that store, process, or transmit credit card information.

Common mistakes.

A. COBIT is an IT governance and management framework developed by ISACA that applies broadly across industries and is not specific to payment card security.
B. SOX is a U.S. federal law focused on financial reporting accuracy and corporate governance for publicly traded companies, with no specific payment card data requirements.
C. HIPAA is a U.S. federal law that governs the privacy and security of protected health information in the healthcare industry, not payment card data.

Concept tested. PCI DSS applicability to payment card industry

Reference. https://www.pcisecuritystandards.org/document_library/

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice