DA0-001 · Question #331
An analyst collected data that includes primary account numbers, expiration dates, and service codes. Which of the following data governance classifications is used to describe this data?
The correct answer is B. PCI. The collected data, which includes primary account numbers, expiration dates, and service codes, directly pertains to payment card details. This type of sensitive financial information falls under the Payment Card Industry Data Security Standard (PCI DSS) classification.
Question
An analyst collected data that includes primary account numbers, expiration dates, and service codes. Which of the following data governance classifications is used to describe this data?
Options
- APII
- BPCI
- CPBI
- DPHI
How the community answered
(27 responses)- B89% (24)
- C4% (1)
- D7% (2)
Why each option
The collected data, which includes primary account numbers, expiration dates, and service codes, directly pertains to payment card details. This type of sensitive financial information falls under the Payment Card Industry Data Security Standard (PCI DSS) classification.
PII (Personally Identifiable Information) refers to data that can be used to identify an individual, such as name, address, or social security number, but 'primary account numbers, expiration dates, and service codes' are specifically payment card related, which is a narrower and more specific classification than general PII.
PCI (Payment Card Industry) refers to data protected under the PCI Data Security Standard (PCI DSS), which is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Primary account numbers (PAN), expiration dates, and service codes are core components of payment card data that fall under PCI DSS regulations.
PBI (Power BI) is a business intelligence service, not a data governance classification.
PHI (Protected Health Information) refers to health-related information covered under regulations like HIPAA, which is not applicable to primary account numbers or service codes.
Concept tested: Data governance - PCI DSS
Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-pci-dss
Topics
Community Discussion
No community discussion yet for this question.