ExpertEasy1 markMultiple Choice
CPA · Question 12 · Area II: Security
A company processes credit card transactions. Which standard is MOST applicable to their environment?
A company processes credit card transactions. Which standard is MOST applicable to their environment?
Answer options:
A.
HIPAA
B.
GDPR
C.
PCI DSS
D.
FERPA
How to approach this question
Identify the standard specific to payment cards.
Full Answer
C.PCI DSS✓ Correct
PCI DSS
PCI DSS applies to all entities involved in payment card processing.
Common mistakes
Selecting GDPR because credit card info is personal data (true, but PCI DSS is the specific industry standard).
Practice the full CPA ISC Practice Exam 2
82 questions · hints · full answers · grading
More questions from this exam
Q01A service organization provides a cloud-based payroll platform where clients access the software ...MediumQ02An auditor is reviewing the backup strategy for a financial institution that requires a Recovery ...HardQ03During a walkthrough of the change management process, an auditor observes that developers have w...MediumQ04An auditor is reviewing a SQL query used to generate a list of active customers for a marketing c...HardQ05Which of the following entities is considered a 'Covered Entity' under the HIPAA Privacy Rule?Medium