A retail company is expanding its online presence and plans to store customer payment data in a new cloud-based system. The company must comply with PCI DSS. The security architect must adjust the security architecture to support this initiative. Which action is most important?

Ensure the cloud provider is PCI DSS compliant and sign a responsibility matrix.

Encrypt all customer data with a key stored on the same server as the data.

Use a private cloud to avoid PCI DSS requirements.

Store payment data on-premises only to simplify compliance.

Information Systems Security Management Professional

Domain 2Objective 2

2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 6)

Part of the Systems Lifecycle Management domain, which accounts for 15% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

15%of the exam

Questions 26–26

26application · medium
A retail company is expanding its online presence and plans to store customer payment data in a new cloud-based system. The company must comply with PCI DSS. The security architect must adjust the security architecture to support this initiative. Which action is most important?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

2.2 Integrate Organization Initiatives and Emerging Technologies Throughout the Security Architecture ISSMP Practice Questions (Page 6)

Questions 26–26

A retail company is expanding its online presence and plans to store customer payment data in a new cloud-based system. The company must comply with PCI DSS. The security architect must adjust the security architecture to support this initiative. Which action is most important?

Keep studying — Systems Lifecycle Management