Pcip stuvia - Study guides, Class notes & Summaries

PCI DSS Requirement 1 - ANSWERSInstall and maintain a firewall configuration to protect cardholder data PCI DSS Requirement 2 - ANSWERSDo not use vendor supplied defaults for system passwords and other security parameters PCI DSS Requirement 3 - ANSWERSProtect stored cardholder data by enacting a formal data retention policy and implement secure deletion methods PCI DSS Requirement 4 - ANSWERSProtected Cardholder Data during transmission over the internet, wireless networks or other ope...

How is skimming used to target PCI data? - ANSWERSCopying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANSWERSBy doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - ANSWERSBy skimming the card to get the full track of data, and then making another like card. Using the card i...

Which of the below functions is associated with Acquirers? A. Provide settlement services to a merchant B. Provide authorization services to a merchant C. Provide clearing services to a merchant D. All of the options - ANSWERSCorrect Answer: D Which of the following entities will actually approve a purchase? A. Non-Issuing Merchant Bank B. Issuing Bank C. Payment Transaction Gateway D. Acquiring Bank - ANSWERSCorrect Answer: B Which of the following lists the correc...

PCI Data Security Standard (PCI DSS) - ANSWER-The PCI DSS applies to all entities that store, process, and/or transmit cardholder data. It covers technical and operational system components included in or connected to cardholder data. If you accept or process payment cards, PCI DSS applies to you. Sensitive Authentication Data - ANSWER-Merchants, service providers, and other entities involved with payment card processing must never store sensitive authentication data after authorization. T...

Requirement 2 - ANSWER-Do not use vendor supplied defaults for system passwords and other security parameters Requirement 3 - ANSWER-Protect stored cardholder data by enacting a formal data retention policy and implement secure deletion methods Requirement 4 - ANSWER-Encrypt transmission of cardholder data across open, public networks Requirement 5 - ANSWER-Protect all systems against malware and regularly update anti-virus software or programs Requirement 6 - ANSWER-Develop and main...

Which of the below functions is associated with Acquirers? A. Provide settlement services to a merchant B. Provide authorization services to a merchant C. Provide clearing services to a merchant D. All of the options - ANSWER-Correct Answer: D Which of the following entities will actually approve a purchase? A. Non-Issuing Merchant Bank B. Issuing Bank C. Payment Transaction Gateway D. Acquiring Bank - ANSWER-Correct Answer: B Which of the following lists the correc...

PA-DSS - ANSWER-Payment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - ANSWER-Pin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - ANSWER-Hardware Security Module Pin Standard (not required but may assist in becoming compliant) P2PE - ANSWER-Point to Point Encryption Standard (Most helpful standard to reduce scope) SRED - ANSWER-Secure Read and Exchange Module allows terminals to be approved for secure encryp...

PCIP Exam Questions and Answers (Graded A)PCIP Exam Questions and Answers (Graded A)PCIP Exam Questions and Answers (Graded A)PCIP Exam Questions and Answers (Graded A)PCIP Exam Questions and Answers (Graded A)

by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANSWER-By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - ANSWER-By skimming the card to get the full track of data, and then making another like card. Using the card information in a "Card-not-present transactions such as e-commerce or mail orde...

How is skimming used to target PCI data? - ANSWERSCopying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANSWERSBy doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - ANSWERSBy skimming the card to get the full track of data, and then making another like card. Using the card i...