Compliance Standards CV0-004 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key requirement for compliance with ISO 27001?

   • AConducting regular risk assessments.
   • BObtaining a SOC 2 report annually.
   • CImplementing multi-factor authentication for all users.
   • DEncrypting all data at rest and in transit.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following best describes the scope of PCI DSS?

   • AIt applies only to financial institutions and banks.
   • BIt applies only to physical retail stores that accept credit cards.
   • CIt applies only to cloud service providers.
   • DIt applies to all organizations that store, process, or transmit cardholder data.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A retail company processes credit card payments through a cloud-based e-commerce platform. The platform stores cardholder data in a database that is also used for analytics. The company's compliance officer wants to reduce the PCI DSS scope. Which action best achieves this?

   • AMove the database to a dedicated physical server
   • BSegment the network so the database is isolated from the rest of the environment
   • CEncrypt the database and restrict access to cardholder data
   • DTokenize cardholder data and use tokens for analytics
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which standard provides a framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS)?

   • ASOC 2
   • BPCI DSS
   • CGDPR
   • DISO 27001
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following best describes the purpose of a SOC 2 report?

   • ATo provide assurance about the controls at a service organization relevant to security, availability, processing integrity, confidentiality, and privacy.
   • BTo certify that an organization's information security management system meets international standards.
   • CTo validate compliance with the Payment Card Industry Data Security Standard.
   • DTo provide a legal opinion on the organization's data protection practices.
   Reveal Solution Discussion Select an answer first