ExamGecko
Home Home / ISC / CCSP
Question list
Search
Search

Question 346 - CCSP discussion

Report
Export

Above and beyond general regulations for data privacy and protection, certain types of data are subjected to more rigorous regulations and oversight.

Which of the following is not a regulatory framework for more sensitive or specialized data?

A.
FIPS 140-2
Answers
A.
FIPS 140-2
B.
FedRAMP
Answers
B.
FedRAMP
C.
PCI DSS
Answers
C.
PCI DSS
D.
HIPAA
Answers
D.
HIPAA
Suggested answer: A

Explanation:

The FIPS 140-2 standard pertains to the certification of cryptographic modules and is not a regulatory framework. The Payment Card Industry Data Security Standard (PCI DSS), the Federal Risk and Authorization Management Program (FedRAMP), and the Health Insurance Portability and Accountability Act (HIPAA) are all regulatory frameworks for sensitive or specialized data.

asked 18/09/2024
Mary Andreou
46 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first