Cisco Exam 350-201 Topic 6 Question 81 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 81
Topic #: 6

A company recently started accepting credit card payments in their local warehouses and is undergoing a PCI audit. Based on business requirements, the company needs to store sensitive authentication data for 45 days. How must data be stored for compliance?

Apost-authorization by non-issuing entities if there is a documented business justification

Bby entities that issue the payment cards or that perform support issuing services

Cpost-authorization by non-issuing entities if the data is encrypted and securely stored

Dby issuers and issuer processors if there is a legitimate reason

Show Suggested Answer

Suggested Answer: C

by Paris at Feb 07, 2024, 11:44 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Madonna

7 months ago

So, option A seems to be the correct choice for compliance in this scenario.

upvoted 0 times

...

Yuki

7 months ago

In that case, the data can be stored post-authorization by non-issuing entities with a documented business justification.

upvoted 0 times

...

Bettina

7 months ago

But what if the data needs to be stored for business reasons for 45 days?

upvoted 0 times

...

Elbert

7 months ago

I agree, storing the data securely is crucial for compliance with PCI standards.

upvoted 0 times

...

Leana

7 months ago

I think the data should be stored post-authorization by non-issuing entities with encryption.

upvoted 0 times

...

Shaquana

8 months ago

Exactly. And you know what they say, 'encrypt first, ask questions later.' Better to be safe than sorry when it comes to PCI compliance, am I right?

upvoted 0 times

...

Jean

8 months ago

Totally. Option C is the only one that specifically mentions encryption and secure storage, which is crucial for protecting that sensitive data. The other options are a bit more vague.

upvoted 0 times

...

Bulah

8 months ago

Hmm, yeah, I agree. Based on the options, it seems like storing the data encrypted and securely by non-issuing entities (Option C) is the way to go. That seems to be the most compliant approach.

upvoted 0 times

Meaghan

8 months ago

Option C seems to be the most appropriate and secure way to handle the sensitive information during the 45-day storage period.

upvoted 0 times

...

Xuan

8 months ago

Agreed, we need to make sure we handle the data properly to protect our customers and the company.

upvoted 0 times

...

Rusty

8 months ago

It's better to be safe and secure when it comes to storing such data, especially with credit card payments involved.

upvoted 0 times

...

Kirby

8 months ago

Definitely, it's important to follow the proper protocols when handling sensitive authentication data.

upvoted 0 times

...

Joanna

8 months ago

Yes, that would ensure compliance with the business requirements and the PCI audit.

upvoted 0 times

...

Lonna

8 months ago

I think we should go with option C, storing the data encrypted and securely by non-issuing entities.

upvoted 0 times

...

Paulene

8 months ago

Okay, let's think this through. The company needs to store sensitive authentication data for 45 days, which is a pretty standard requirement for PCI compliance. But the tricky part is how to store it properly.

upvoted 0 times

...