Cognizant Safety and Compliance 3

Question 1

Under PCI-DSS compliance requirements, which practice is mandatory when storing cardholder data?

Accepted Answer

Encrypt stored cardholder data using strong cryptography

Answer

PCI-DSS Requirement 3 mandates encryption of stored cardholder data to protect it from unauthorized access.

Question 2

What does the principle of 'need to know' mean in the context of Cognizant's information security policy?

Accepted Answer

Access to sensitive information is granted only to those who require it for their job function

Answer

The 'need to know' principle ensures that sensitive data is accessible only to individuals whose roles genuinely require it.

Question 3

Cognizant's anti-bribery and corruption policy prohibits associates from offering gifts to government officials. Which of the following scenarios MOST likely violates this policy?

Accepted Answer

Providing a government auditor with expensive event tickets to influence a contract decision

Answer

Providing expensive tickets intended to influence a government official's decision is a clear violation of anti-bribery laws such as the FCPA and UK Bribery Act.

Question 4

Which framework does Cognizant commonly follow when managing information security controls for its IT service delivery?

Accepted Answer

ISO/IEC 27001

Answer

ISO/IEC 27001 is the international standard for information security management systems (ISMS) widely adopted by Cognizant.

Question 5

A Cognizant associate working remotely connects to a public Wi-Fi network to access company systems. The required security measure is:

Accepted Answer

Use an approved VPN before accessing any corporate resources

Answer

Cognizant policy requires using a company-approved VPN when connecting to public or untrusted networks to encrypt data in transit.

(Cognizant) Cognizant Test Practice Test

(Cognizant) Cognizant Test Practice Test

Cognizant Safety and Compliance 3