nerdexam
CompTIA

CV0-002 · Question #546

A cloud administrator is building a company's payment system in the public cloud. Which of the following security standards is the cloud administrator MOST likely to apply to comply with industry…

The correct answer is B. PCI. When building a payment system in the public cloud, the cloud administrator is most likely to apply PCI security standards to comply with industry regulations for handling cardholder data.

Security

Question

A cloud administrator is building a company's payment system in the public cloud. Which of the following security standards is the cloud administrator MOST likely to apply to comply with industry standards?

Options

  • APKI
  • BPCI
  • CPII
  • DPSK

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    90% (27)
  • C
    3% (1)

Why each option

When building a payment system in the public cloud, the cloud administrator is most likely to apply PCI security standards to comply with industry regulations for handling cardholder data.

APKI

PKI (Public Key Infrastructure) is a system for creating, managing, and distributing digital certificates to verify identity, which is a component of security but not an overarching industry standard for payment systems.

BPCICorrect

PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Implementing PCI DSS is a mandatory requirement for any organization, including those operating in the cloud, that handles payment card data to protect against data breaches and fraud.

CPII

PII (Personally Identifiable Information) refers to data that can be used to identify an individual, and while important for data privacy, it is a type of data, not a security standard specifically for payment systems.

DPSK

PSK (Pre-Shared Key) is a cryptographic key that has been securely exchanged between two parties beforehand, often used for authentication in VPNs or Wi-Fi, but it is not an industry-wide compliance standard for payment processing.

Concept tested: Payment card industry compliance standards

Source: https://www.pcisecuritystandards.org/

Topics

#compliance#PCI DSS#payment systems#public cloud security

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice