Which framework in Prisma Public Cloud can be used to provide general best practices when no specific legal requirements or regulatory standards need to be met?

Question

Options

• AHIPAA
• BCIS Benchmark
• CPayment Card Industry DSS V3
• DGDPR

• A
  5% (2)
• B
  90% (35)
• C
  3% (1)
• D
  3% (1)

Explanation

CIS Benchmark (B) is the correct choice because it provides general security best practices and hardening guidelines that are broadly applicable across cloud environments - not tied to any specific industry, regulation, or legal requirement. It's the go-to framework when an organization simply wants to follow widely accepted security standards without being subject to a particular compliance mandate.

Why the distractors are wrong:

• A. HIPAA - applies specifically to U.S. healthcare organizations handling protected health information (PHI); it's a legal requirement, not a general best-practice framework.
• C. PCI DSS V3 - governs organizations that process, store, or transmit credit/debit card data; it's an industry-specific regulatory standard.
• D. GDPR - is a European Union data privacy regulation with strict legal obligations; it applies to organizations handling EU residents' personal data.

Memory tip: Think of CIS as "Common Industry Standard" - it's the universal baseline you reach for when there's no specific law or regulation pointing you elsewhere. If a question mentions "no specific legal or regulatory requirement," CIS Benchmark is almost always the answer.

No community discussion yet for this question.