Salesforce Certified Heroku Architect (Plat-Arch-206) Exam - Topic 6 Question 54 Discussion

Actual exam question for Salesforce's Salesforce Certified Heroku Architect (Plat-Arch-206) exam

Question #: 54
Topic #: 6

[All Salesforce Certified Heroku Architect (Plat-Arch-206) Questions]

A client has an e-commerce application that stores creditcard information. The application will run the production. Which security certification does the application need to meet?

AISO 27017

BPCI level 1

CSOC2Typel

DISO 27018

Show Suggested Answer

Suggested Answer: B, D

by Wilbert at Jan 14, 2025, 10:04 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Heroku Architect (Plat-Arch-206) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Josefa

3 months ago

Really? I didn't think PCI was that strict.

upvoted 0 times

...

Matthew

4 months ago

ISO 27017? I thought that was for cloud security.

upvoted 0 times

...

Kenneth

4 months ago

Wait, isn't SOC2Type1 also relevant?

upvoted 0 times

...

Linn

4 months ago

I agree, PCI compliance is a must.

upvoted 0 times

...

Lawrence

4 months ago

Definitely PCI level 1 for credit card info!

upvoted 0 times

...

Annice

4 months ago

SOC2 Type I sounds familiar, but I don't think it directly applies to handling credit card info like PCI does.

upvoted 0 times

...

Aliza

5 months ago

I feel like ISO 27017 could be relevant too, but I can't recall if it's specifically for credit card data.

upvoted 0 times

...

Annmarie

5 months ago

I remember studying about PCI compliance, and it seems like the right choice here, especially for e-commerce.

upvoted 0 times

...

Portia

5 months ago

I think the application needs to comply with PCI level 1 since it handles credit card information, but I'm not entirely sure.

upvoted 0 times

...

Casie

5 months ago

Hmm, I'm not too familiar with the different security certifications. I'll need to do some quick research on PCI, ISO 27017, and SOC2 Type I to determine the best fit for this e-commerce application.

upvoted 0 times

...

Earlean

5 months ago

I've got this! PCI level 1 is the security certification that's specifically designed for applications that handle credit card transactions. That's the clear choice here.

upvoted 0 times

...

Albina

5 months ago

I'm a bit unsure here. Is ISO 27017 or ISO 27018 also a valid option for this type of application? I'll need to review the differences between these standards.

upvoted 0 times

...

Alaine

5 months ago

Okay, let me see... PCI level 1 sounds like the most relevant certification for a production e-commerce app that stores credit card data. I'll go with that.

upvoted 0 times

...

Annmarie

5 months ago

Hmm, this seems like a straightforward question about security certifications. I'll need to think carefully about the requirements for handling credit card information in a production environment.

upvoted 0 times

...

Paola

11 months ago

SOC2 Type I? Pfft, that's like using a Band-Aid to cover a gunshot wound. PCI level 1 all the way, baby!

upvoted 0 times

Soledad

9 months ago

Agreed, PCI level 1 certification is crucial for protecting customer data in e-commerce applications.

upvoted 0 times

...

Devorah

9 months ago

ISO 27017 and ISO 27018 are important too, but PCI level 1 is the gold standard for this scenario.

upvoted 0 times

...

Royal

10 months ago

SOC2 Type I is just not enough to ensure the security of sensitive data like credit card information.

upvoted 0 times

...

Dana

10 months ago

PCI level 1 is definitely the way to go for e-commerce applications storing credit card information.

upvoted 0 times

...

Eden

11 months ago

I'm pretty sure ISO 27018 is the way to go. Gotta keep that personal data secure, am I right?

upvoted 0 times

Reita

10 months ago

Yeah, ISO 27018 focuses on protecting personal data. It's important for an e-commerce app.

upvoted 0 times

...

Youlanda

10 months ago

ISO 27018 is a good choice for data security.

upvoted 0 times

...

Bette

11 months ago

PCI level 1 is definitely the way to go. Anything less and those hackers will be all over our client's e-commerce app like a bad rash!

upvoted 0 times

...

Maryann

11 months ago

I'm not sure about PCI level 1. Maybe ISO 27017 or ISO 27018 could also be relevant for security certification.

upvoted 0 times

...

Shala

11 months ago

I agree with Alyce. PCI level 1 is specifically designed for e-commerce applications handling credit card data.

upvoted 0 times

...

Mi

11 months ago

I heard the guy who wrote the PCI standard loves to collect rare coins. Bet he's got some real treasures hidden away!

upvoted 0 times

Christoper

9 months ago

B) PCI level 1

upvoted 0 times

...

Gladis

9 months ago

I'm pretty sure it's PCI level 1, that's the standard for e-commerce applications storing credit card data.

upvoted 0 times

...

Cristen

9 months ago

B) PCI level 1

upvoted 0 times

...

Angelyn

10 months ago

No, I believe it's ISO 27017 that the application needs to meet for security certification.

upvoted 0 times

...

Vilma

10 months ago

A) ISO 27017

upvoted 0 times

...

Cassi

10 months ago

I think PCI level 1 is the certification needed for storing credit card information.

upvoted 0 times

...

Gearldine

11 months ago

B) PCI level 1

upvoted 0 times

...

Alyce

11 months ago

I think the application needs to meet PCI level 1 for storing credit card information securely.

upvoted 0 times

...