PCI-DSS Fundamentals PREP QUESTIONS CORRECT VERIFIED ANSWERS

PCI-DSS Fundamentals PREP QUESTIONS CORRECT VERIFIED ANSWERS Methods for Stealing Payment card data include: a) Weak Passwords b) Malware c) Physical skimming d) All of the options are correct - ANSWER d) All of the options are correct The PCI DSS applies to: a) Any entity that stores, processes, or transmits payment card account data b) Service Providers only c) Merchants only d) Merchants and third party processors (TTPs) only - ANSWER a) Any entity that stores, processes, or transmits payment card account data The PCI DSS applies to: a) Any entity that stores, processes, or transmits payment card account data b) Service Providers only c) Merchants only d) Merchants and third party processors (TTPs) only - ANSWER a) Any entity that stores, processes, or transmits payment card account data The P2PE Standard Covers: a) Secure payment applications for processing transactions b) Encryption, decryption, and key management requirements for point-topoint encryption solutions c) Physical security requirements for manufacturing payment cards d) Mechanisms used to protect the PIN and encrypted PIN Blocks - ANSWER b) Encryption, decryption, and key management requirements for point-to-point encryption solutions The standard for validating off-the-shelf payment applications used in authorizations and settlement is: a) PCI P2PE b) PA-DSS c) PCI PTS d) PCI DSS - ANSWER b) PA-DSS Merchants using PA-DSS validated payment applications are automatically PCI DSS compliant. a) True b) False - ANSWER b) False Which of the below functions is associated with acquirers? a) Provide settlement services to a merchant b) Provide clearing services to a merchant c) Provide authorization services to a merchant d) All of the options - ANSWER d) All of the options Which of the following entities will ultimately approve a purchase? a) Issuer b) Acquirer c) Payment Transaction Gateway d) Merchant - ANSWER a) Issuer Which step does the payment brand network provide complete reconciliation to the merchants' bank? a) Settlement b) Authorization c) Approval d) Clearing - ANSWER d) Clearing A company that _____________________ is considered to be a service provider. a) Controls or could impact the security of another entity's cardholder data b) Is a payment card brand c) Is a founding member of PCI SSC d) Is not also a merchant - ANSWER a) Controls or could impact the security of another entity's cardholder data