The correct answer is Payment Card Industry Data Security Standard.

Payment Card Industry Data Security Standard is a security standard created by the PCI Security Standards Council to protect cardholder data and to secure payment card processing environments. It defines specific technical and operational requirements for merchants, processors, and service providers that store, process, or transmit credit and debit card data including network security, protection of cardholder data, access controls, monitoring, and regular testing.

ISO 27001 Information Security Management System is a general framework for establishing an information security management system and it is not specific to payment card handling. Organizations can use ISO 27001 to strengthen overall security but it does not replace the cardholder focused requirements of PCI DSS.

Google Cloud Armor is a cloud service that provides DDoS mitigation and web application firewall features and it is not a compliance framework. It can support technical controls required by standards but it does not itself define the policies and processes for protecting cardholder data.

NIST Special Publication 800 53 is a catalog of security and privacy controls aimed primarily at federal information systems and it is not focused on payment card data. It can be mapped to PCI requirements in some implementations but it is not the standard designed specifically for cardholder data protection.

Full AWS Practitioner Certification Question