nerdexam
CompTIA

CV0-002 · Question #424

There has been a change in requirements for two countries where PCI virtual instances exist. As such three virtual instances need to be added in both countries' PCI environments, and two instances nee

The correct answer is A. By the effective date of the new requirement, in each country, remove the two out-of-compliance virtual. To ensure compliance for PCI virtual instances by a new requirement's effective date, the best first step is to remove any existing out-of-compliance virtual instances in each country.

Security

Question

There has been a change in requirements for two countries where PCI virtual instances exist. As such three virtual instances need to be added in both countries' PCI environments, and two instances need to be removed. Which of the following is the BEST way to ensure compliance is met in those two countries?

Options

  • ABy the effective date of the new requirement, in each country, remove the two out-of-compliance virtual
  • BBy the effective date of the new requirement, in each country, implement the three new virtual instances.
  • CBy the effective date of the new requirement, in each country implement the three new virtual instances.
  • DBy the effective date of the new requirement, in each country, remove the two out-of-compliance virtual

How the community answered

(34 responses)
  • A
    76% (26)
  • B
    12% (4)
  • C
    9% (3)
  • D
    3% (1)

Why each option

To ensure compliance for PCI virtual instances by a new requirement's effective date, the best first step is to remove any existing out-of-compliance virtual instances in each country.

ABy the effective date of the new requirement, in each country, remove the two out-of-compliance virtualCorrect

In PCI and other compliance-driven environments, the highest priority for ensuring compliance by an effective date is to remediate existing non-compliant components; removing 'out-of-compliance virtual instances' directly addresses and resolves current violations.

BBy the effective date of the new requirement, in each country, implement the three new virtual instances.

While implementing new instances is part of the overall requirement, it does not address potential existing compliance issues with the two instances that need to be removed; stopping non-compliance takes precedence over expansion.

CBy the effective date of the new requirement, in each country implement the three new virtual instances.

This choice is a duplicate of choice B and is incorrect for the same reason, as it prioritizes adding new instances over remediating existing non-compliance.

DBy the effective date of the new requirement, in each country, remove the two out-of-compliance virtual

This choice is a duplicate of choice A, and while technically correct, typically only one unique option is the designated answer in multiple-choice questions.

Concept tested: Compliance remediation priority

Source: https://learn.microsoft.com/en-us/azure/compliance/overview

Topics

#Compliance#Virtual instances#Resource management#PCI DSS

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CV0-002 Practice