Drag a concept onto its matching description — or click a concept then click the description.
Concepts
Matches
European Union data protection
US healthcare information privacy
Payment card industry security
US financial reporting controls
CCSP Cloud Application Security Practice Question
Match each compliance framework to its primary jurisdiction or industry.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GDPR: European Union
Compliance frameworks are often region- or industry-specific; cloud providers must support customer compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
GDPR: European Union
Why this is correct
GDPR is a regulation for data protection in the European Union.
- ✓
HIPAA: US healthcare
Why this is correct
HIPAA sets standards for protecting sensitive patient data in the US healthcare industry.
- ✓
PCI DSS: Payment card industry
Why this is correct
PCI DSS applies to entities handling payment card data globally.
- ✓
FedRAMP: US federal government
Why this is correct
FedRAMP standardizes security assessment for US federal cloud services.
- ✗
ISO 27001: European Union
Why it's wrong here
Incorrect — ISO 27001 is an international standard for information security management, not specific to the EU.
- ✗
SOC 2: US healthcare
Why it's wrong here
Incorrect — SOC 2 is for service organizations (e.g., data centers) and is not specific to US healthcare.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.