Pcip stuvia - Study guides, Class notes & Summaries

PCI Data Security Standard (PCI DSS) - ANSWERSThe PCI DSS applies to all entities that store, process, and/or transmit cardholder data. It covers technical and operational system components included in or connected to cardholder data. If you accept or process payment cards, PCI DSS applies to you. Sensitive Authentication Data - ANSWERSMerchants, service providers, and other entities involved with payment card processing must never store sensitive authentication data after authorization. T...

PCI DSS Requirement 1 - ANSWERSInstall and maintain a firewall configuration to protect cardholder data PCI DSS Requirement 2 - ANSWERSDo not use vendor supplied defaults for system passwords and other security parameters PCI DSS Requirement 3 - ANSWERSProtect stored cardholder data by enacting a formal data retention policy and implement secure deletion methods PCI DSS Requirement 4 - ANSWERSProtected Cardholder Data during transmission over the internet, wireless networks or other ope...

Which of the below functions is associated with Acquirers? A. Provide settlement services to a merchant B. Provide authorization services to a merchant C. Provide clearing services to a merchant D. All of the options - ANSWERSCorrect Answer: D Which of the following entities will actually approve a purchase? A. Non-Issuing Merchant Bank B. Issuing Bank C. Payment Transaction Gateway D. Acquiring Bank - ANSWERSCorrect Answer: B Which of the following lists the correc...

How is skimming used to target PCI data? - ANSWERSCopying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers. How is phishing used to target PCI data? - ANSWERSBy doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e-mails. How can Payment Data be Monetized? - ANSWERSBy skimming the card to get the full track of data, and then making another like card. Using the card i...

PA-DSS - ANSWERSPayment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - ANSWERSPin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - ANSWERSHardware Security Module Pin Standard (not required but may assist in becoming compliant) P2PE - ANSWERSPoint to Point Encryption Standard (Most helpful standard to reduce scope) SRED - ANSWERSSecure Read and Exchange Module allows terminals to be approved for secure encryp...