nerdexam
CompTIA

DA0-001 · Question #331

An analyst collected data that includes primary account numbers, expiration dates, and service codes. Which of the following data governance classifications is used to describe this data?

The correct answer is B. PCI. The collected data, which includes primary account numbers, expiration dates, and service codes, directly pertains to payment card details. This type of sensitive financial information falls under the Payment Card Industry Data Security Standard (PCI DSS) classification.

Data Governance, Quality, and Controls

Question

An analyst collected data that includes primary account numbers, expiration dates, and service codes. Which of the following data governance classifications is used to describe this data?

Options

  • APII
  • BPCI
  • CPBI
  • DPHI

How the community answered

(27 responses)
  • B
    89% (24)
  • C
    4% (1)
  • D
    7% (2)

Why each option

The collected data, which includes primary account numbers, expiration dates, and service codes, directly pertains to payment card details. This type of sensitive financial information falls under the Payment Card Industry Data Security Standard (PCI DSS) classification.

APII

PII (Personally Identifiable Information) refers to data that can be used to identify an individual, such as name, address, or social security number, but 'primary account numbers, expiration dates, and service codes' are specifically payment card related, which is a narrower and more specific classification than general PII.

BPCICorrect

PCI (Payment Card Industry) refers to data protected under the PCI Data Security Standard (PCI DSS), which is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Primary account numbers (PAN), expiration dates, and service codes are core components of payment card data that fall under PCI DSS regulations.

CPBI

PBI (Power BI) is a business intelligence service, not a data governance classification.

DPHI

PHI (Protected Health Information) refers to health-related information covered under regulations like HIPAA, which is not applicable to primary account numbers or service codes.

Concept tested: Data governance - PCI DSS

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-pci-dss

Topics

#Data Classification#Data Governance#Payment Card Industry (PCI)#Sensitive Data

Community Discussion

No community discussion yet for this question.

Full DA0-001 Practice