CompTIA Security+ SY0-701 Practice Question
A financial institution outsources the processing of credit card transactions to a cloud service provider. To comply with industry regulations, which action should the institution prioritize to ensure the cloud service provider adheres to proper data handling and protection requirements?
Implementing data anonymization techniques for all transactions processed
Executing a detailed contractual agreement that covers data protection and handling expectations
Conducting regular security audits of the cloud service provider's infrastructure
Encrypting all credit card data in transit to and from the cloud service provider