Examen
AQSA Certification Exam Questions With Correct Answers_ 1).pdf
- Cours
- Établissement
AQSA Certification Exam Questions With Correct Answers_ 1).pdf
[Montrer plus]
Vendeur
S'abonner
Denyss
Aperçu du contenu
8/20/24, 9:02 PMAQSA Certification
Jeremiah
Terms in this set (157)
is an independent industry standards body providing oversights of the development
PCI SSC
and management of Payment Card Industry Data Security Standards on a global basis.
What are the founding payment brands? American express, Discover, JCB, Mastercard, and VISA
defined by the payment brands, based on transaction volume. Transaction volume
What define the merchant levels?
determined by the acquirer)
Defined by the payment brands according to transaction volume and/or type of service
What define the service provider levels? provider. Determined by the payment brans or acquirer, or sometimes the service
provider.
Card-not-present merchants (e-commerce or mail/telephone-order) that have fully
outsourced all cardholder data functions to PCI DSS validated third-part service
SAQ-A
providers, with no electronic storage, processing, or transmission of any cardholder
data on the merchant's systems or premises.
E-commerce merchants who outsource all payment processing to PCI DSS validated
third parties, and who have a website(s) that doesn't directly receive cardholder data
SAQ A-EP but that can impact the security of the payment transaction. No electronic storage,
processing, or transmission of any cardholder data on the merchant's systems or
premises.
Merchants using only:
SAQ-B - Imprint machines with no electronic cardholder data storage; and/or
- Standalone, dial-out terminals with no electronic cardholder data storage.
Merchants using only stand-alone, PTS-approved payment terminals with an IP
SAQ-B-IP connection to the payment processor, with no electronic cardholder data storage.
Not applicable to e-commerce channels.
is for merchants using only web-based virtual payment terminals, where cardholder
SAQ C-VT
data is manually entered into a secure website from a single system.
is for merchants with dedicated payment application systems segmented from all other
systems, and connected to the Internet for the purposes of transaction processing.
SAQ-C SAQ C is not applicable to e-commerce payment channels. A merchant only accepts
payments via the telephone and they enter the cardholder data directly into a webpage
provided by their acquirer.
AQSA Certification
1/6
, 8/20/24, 9:02 PM
covers security of the environments that store, process, or transmit account data. The
PCI DSS scope of PCI DSS covers environments receiving account data from payment
applications and other sources—acquirers, for example.
covers secure payment applications to support PCI DSS compliance. The scope of PA-
DSS addresses when a payment application receives account data from cardholder-
PCI PA-DSS
interface devices such as point-of sale-terminals or other devices and begins the
payment transaction.
covers secure encryption, decryption, and key management for point-to-point
PCI P2PE (Point-to-Point Encryption) encryption solutions. Requirements for a P2PE solution will vary depending on the
deployment environment and the technologies used for a specific implementation.
covers device tamper detection, cryptographic processes, and other mechanisms used
to protect the PIN and other sensitive data, such as cryptographic keys. The PTS set of
requirements addresses how cardholder PINs are protected at cardholder-interface
PCI PTS (PIN Transaction Security) POI
devices such as point-of-sale terminals, as well as hardware security modules that are
used for payment processing and cardholder authentication applications and
processes.
covers secure management, processing, and transmission of personal identification
PCI PIN Security
number (PIN) data during online and offline payment card transaction processing.
covers the design of hardware security modules and for securely protecting those
PCI PTS HSM standard
devices until they are deployed.
establish minimum security levels for card vendors involved in payment card
Card Production standards manufacturing, card personalization, pre-personalization, chip embedding, data
preparation , and fulfillment.
Discover Compliance Program is called Information Security Compliance
______________.
JCB Compliance Program is called Data Security Program
______________.
MasterCard Compliance Program is called Site Data Protection
______________.
Visa Inc. Compliance Program is called Information Security Program
______________.
Visa Europe Compliance Program is called Account Information Security Program.
______________.
that they handle PCI DSS compliance tracking, enforcement, and any penalties or fees
The key thing to understand for payment
that might be assigned. In addition, payment brands are responsible for forensic
brand compliance programs is ______ _.
response and investigation of account data compromises.
Develop and enforce compliance programs/Endorse QSA, PA-QSA and ASV company
What are the Payment Brand Roles?
qualification criteria/ Accept validation documentation from QSAs, PA-QSAs, and ASVs.
Merchant will generally report to their acquirer/ payment brands.
__________ where service providers will report
to the ________ _.
often referred to as the SAQ which is a validation tool for merchants and service
providers self-evaluating their compliance with PCI DSS. It is a validation tool for
self-assessment questionnaire
entities that are not required to submit a Report on Compliance as part of an onsite
assessment.
is for all other SAQ-eligible merchants that do not fall into any of the other SAQ
SAQ D categories, and for any service providers defined by a payment brand as eligible to
complete the SAQ.
AQSA Certification
2/6
Les avantages d'acheter des résumés chez Stuvia:
Qualité garantie par les avis des clients
Les clients de Stuvia ont évalués plus de 700 000 résumés. C'est comme ça que vous savez que vous achetez les meilleurs documents.
L’achat facile et rapide
Vous pouvez payer rapidement avec iDeal, carte de crédit ou Stuvia-crédit pour les résumés. Il n'y a pas d'adhésion nécessaire.
Focus sur l’essentiel
Vos camarades écrivent eux-mêmes les notes d’étude, c’est pourquoi les documents sont toujours fiables et à jour. Cela garantit que vous arrivez rapidement au coeur du matériel.
Foire aux questions
Qu'est-ce que j'obtiens en achetant ce document ?
Vous obtenez un PDF, disponible immédiatement après votre achat. Le document acheté est accessible à tout moment, n'importe où et indéfiniment via votre profil.
Garantie de remboursement : comment ça marche ?
Notre garantie de satisfaction garantit que vous trouverez toujours un document d'étude qui vous convient. Vous remplissez un formulaire et notre équipe du service client s'occupe du reste.
Auprès de qui est-ce que j'achète ce résumé ?
Stuvia est une place de marché. Alors, vous n'achetez donc pas ce document chez nous, mais auprès du vendeur Denyss. Stuvia facilite les paiements au vendeur.
Est-ce que j'aurai un abonnement?
Non, vous n'achetez ce résumé que pour 7,80 €. Vous n'êtes lié à rien après votre achat.
Peut-on faire confiance à Stuvia ?
4.6 étoiles sur Google & Trustpilot (+1000 avis)
79202 résumés ont été vendus ces 30 derniers jours
Fondée en 2010, la référence pour acheter des résumés depuis déjà 14 ans