A client has an e-commerce application that stores creditcard information. The application will run the production. Which security certification does the application need to meet?
Suggested Answer: B, D
Get Premium Salesforce Certified Heroku Architect (Plat-Arch-206) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
JO
Josefa
11 months ago
Really? I didn't think PCI was that strict.
MA
Matthew
11 months ago
ISO 27017? I thought that was for cloud security.
KE
Kenneth
12 months ago
Wait, isn't SOC2Type1 also relevant?
LI
Linn
12 months ago
I agree, PCI compliance is a must.
LA
Lawrence
1 year ago
Definitely PCI level 1 for credit card info!
AN
Annice
1 year ago
SOC2 Type I sounds familiar, but I don't think it directly applies to handling credit card info like PCI does.
AL
Aliza
1 year ago
I feel like ISO 27017 could be relevant too, but I can't recall if it's specifically for credit card data.
AN
Annmarie
1 year ago
I remember studying about PCI compliance, and it seems like the right choice here, especially for e-commerce.
PO
Portia
1 year ago
I think the application needs to comply with PCI level 1 since it handles credit card information, but I'm not entirely sure.
CA
Casie
1 year ago
Hmm, I'm not too familiar with the different security certifications. I'll need to do some quick research on PCI, ISO 27017, and SOC2 Type I to determine the best fit for this e-commerce application.
EA
Earlean
1 year ago
I've got this! PCI level 1 is the security certification that's specifically designed for applications that handle credit card transactions. That's the clear choice here.
AL
Albina
1 year ago
I'm a bit unsure here. Is ISO 27017 or ISO 27018 also a valid option for this type of application? I'll need to review the differences between these standards.
AL
Alaine
1 year ago
Okay, let me see... PCI level 1 sounds like the most relevant certification for a production e-commerce app that stores credit card data. I'll go with that.
AN
Annmarie
1 year ago
Hmm, this seems like a straightforward question about security certifications. I'll need to think carefully about the requirements for handling credit card information in a production environment.
PA
Paola
2 years ago
SOC2 Type I? Pfft, that's like using a Band-Aid to cover a gunshot wound. PCI level 1 all the way, baby!
SO
Soledad
1 year ago
Agreed, PCI level 1 certification is crucial for protecting customer data in e-commerce applications.
DE
Devorah
1 year ago
ISO 27017 and ISO 27018 are important too, but PCI level 1 is the gold standard for this scenario.
RO
Royal
2 years ago
SOC2 Type I is just not enough to ensure the security of sensitive data like credit card information.
DA
Dana
2 years ago
PCI level 1 is definitely the way to go for e-commerce applications storing credit card information.
ED
Eden
2 years ago
I'm pretty sure ISO 27018 is the way to go. Gotta keep that personal data secure, am I right?
RE
Reita
1 year ago
Yeah, ISO 27018 focuses on protecting personal data. It's important for an e-commerce app.
YO
Youlanda
2 years ago
ISO 27018 is a good choice for data security.
BE
Bette
2 years ago
PCI level 1 is definitely the way to go. Anything less and those hackers will be all over our client's e-commerce app like a bad rash!
MA
Maryann
2 years ago
I'm not sure about PCI level 1. Maybe ISO 27017 or ISO 27018 could also be relevant for security certification.
SH
Shala
2 years ago
I agree with Alyce. PCI level 1 is specifically designed for e-commerce applications handling credit card data.
MI
Mi
2 years ago
I heard the guy who wrote the PCI standard loves to collect rare coins. Bet he's got some real treasures hidden away!
CH
Christoper
1 year ago
B) PCI level 1
GL
Gladis
1 year ago
I'm pretty sure it's PCI level 1, that's the standard for e-commerce applications storing credit card data.
CR
Cristen
1 year ago
B) PCI level 1
AN
Angelyn
1 year ago
No, I believe it's ISO 27017 that the application needs to meet for security certification.
VI
Vilma
2 years ago
A) ISO 27017
CA
Cassi
2 years ago
I think PCI level 1 is the certification needed for storing credit card information.
GE
Gearldine
2 years ago
B) PCI level 1
AL
Alyce
2 years ago
I think the application needs to meet PCI level 1 for storing credit card information securely.