Which regulatory framework in Prisma Cloud measures compliance with European Union (EU) data privacy regulations in Amazon Web services (AWS) workloads?

Question

Options

• AGeneral Data Protection Regulation (GDPR)
• BInternational Organization for Standardization (ISO) 27001
• CPayment Card Industry (PCI) Data Security Standard (DSS) 3.0
• DEU Data Protection Directive 95/46/EC

• A
  89% (50)
• B
  5% (3)
• C
  4% (2)
• D
  2% (1)

Explanation

GDPR (A) is the correct answer because it is the EU's primary legal framework governing personal data privacy, and Prisma Cloud includes a GDPR compliance standard specifically designed to assess whether AWS workloads meet EU data protection requirements - checking controls like data encryption, access logging, and storage configurations.

ISO 27001 (B) is a global information security management standard, not specific to EU data privacy; it covers broader security controls rather than privacy rights under EU law. PCI DSS 3.0 (C) governs payment card data security and applies worldwide to card-handling environments - it has nothing to do with EU privacy regulations. EU Data Protection Directive 95/46/EC (D) is a distractor because, while it was the predecessor EU privacy law, it was replaced by GDPR in May 2018 and is no longer in force; Prisma Cloud maps to the current, active framework.

Memory tip: Think "GDPR = current EU privacy law." The directive (D) is the old version, GDPR is the replacement - on any modern compliance exam, GDPR wins over the directive every time.

No community discussion yet for this question.