PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
What is PA-DSS? -
correct answer ✅is a comprehensive set of requirements for
payment applications, designed for payment application software
vendors to facilitate their customers' PCI DSS compliance.
PA-DSS applies to third-party payment applications that store,
process, or transmit cardholder data as part of authorization and/or
settlement.
What is a Payment Application? -
correct answer ✅applications that store, process, or transmit
cardholder data as part of the authorization or settlement of
payments are considered to be payment applications.
Examples of these include point of sale applications, shopping carts,
and so on.
PA-DSS applies to third-party payment applications that perform
authorization or ____ -
correct answer ✅Settlement
Which applications are exempt from a PA DSS Assessment? -
correct answer ✅Applications not related to authorization and
settlement, but that handle payment card data for other purposes
,PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
for example: loyalty programs
Who determines whether or not a payment application is required
to undergo a PA-DSS assessment? -
correct answer ✅The individual payment brands
___ must validate that the payment application is installed in
accordance with the instructions in the PA-DSS Implementation
Guide, and in a PCI DSS-compliant manner. -
correct answer ✅PCI DSS Assessor
During a PCI DSS assessment, the assessor should focus
on_________ -
correct answer ✅verifying that the validated payment application:
Is implemented into a PCI DSS compliant environment, and
Is implemented according to the PA-DSS Implementation Guide.
Who establishes and enforces their own compliance program for
PA-DSS? -
correct answer ✅Payment Brands
,PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
Define CDE -
correct answer ✅Cardholder Data Environment
what are the 14 PA-DSS requirements? -
correct answer ✅1. Do not retain full track data, card validation
codes or values, or PIN block data.
2. Protect stored cardholder data.
3. Provide secure authentication features.
4. Log Payment Application Activity.
5. Develop Secure Payment Applications.
6. Protect wireless transmissions.
7. Test Payment Applications to address vulnerabilities and maintain
payment application updates.
8. Facilitate secure network implementation.
9. Ensure that cardholder data is never stored on a server
connected to the Internet.
10. Facilitate secure remote access to payment application.
11. Encrypt sensitive traffic over public networks.
12. Secure all non-console administrative access.
13. Maintain a PA-DSS Implementation Guide for customers,
resellers, and integrators.
, PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
14. Assign PA-DSS responsibilities for personnel, and maintain
training programs for personnel, customers, resellers, and
integrators.
Where is the summary of the content the application vendor is
required to include in the Implementation Guide? -
correct answer ✅Appendix A of the PA-DSS
During the application validation, who verifies that the instructions
within the IG are accurate, and that it contains the required
information? -
correct answer ✅The PA-QSA
who is subjected to comply with PCI DSS? -
correct answer ✅Any entity involved in payment card processing.
This includes merchants, processors, acquirers, issuers, and service
providers.
when do PCI DSS requirements apply? -
correct answer ✅wherever account data is stored, processed, or
transmitted.
Questions With 100% Verified Answers
What is PA-DSS? -
correct answer ✅is a comprehensive set of requirements for
payment applications, designed for payment application software
vendors to facilitate their customers' PCI DSS compliance.
PA-DSS applies to third-party payment applications that store,
process, or transmit cardholder data as part of authorization and/or
settlement.
What is a Payment Application? -
correct answer ✅applications that store, process, or transmit
cardholder data as part of the authorization or settlement of
payments are considered to be payment applications.
Examples of these include point of sale applications, shopping carts,
and so on.
PA-DSS applies to third-party payment applications that perform
authorization or ____ -
correct answer ✅Settlement
Which applications are exempt from a PA DSS Assessment? -
correct answer ✅Applications not related to authorization and
settlement, but that handle payment card data for other purposes
,PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
for example: loyalty programs
Who determines whether or not a payment application is required
to undergo a PA-DSS assessment? -
correct answer ✅The individual payment brands
___ must validate that the payment application is installed in
accordance with the instructions in the PA-DSS Implementation
Guide, and in a PCI DSS-compliant manner. -
correct answer ✅PCI DSS Assessor
During a PCI DSS assessment, the assessor should focus
on_________ -
correct answer ✅verifying that the validated payment application:
Is implemented into a PCI DSS compliant environment, and
Is implemented according to the PA-DSS Implementation Guide.
Who establishes and enforces their own compliance program for
PA-DSS? -
correct answer ✅Payment Brands
,PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
Define CDE -
correct answer ✅Cardholder Data Environment
what are the 14 PA-DSS requirements? -
correct answer ✅1. Do not retain full track data, card validation
codes or values, or PIN block data.
2. Protect stored cardholder data.
3. Provide secure authentication features.
4. Log Payment Application Activity.
5. Develop Secure Payment Applications.
6. Protect wireless transmissions.
7. Test Payment Applications to address vulnerabilities and maintain
payment application updates.
8. Facilitate secure network implementation.
9. Ensure that cardholder data is never stored on a server
connected to the Internet.
10. Facilitate secure remote access to payment application.
11. Encrypt sensitive traffic over public networks.
12. Secure all non-console administrative access.
13. Maintain a PA-DSS Implementation Guide for customers,
resellers, and integrators.
, PCI QIR Module 2: In-Person Exam
Questions With 100% Verified Answers
14. Assign PA-DSS responsibilities for personnel, and maintain
training programs for personnel, customers, resellers, and
integrators.
Where is the summary of the content the application vendor is
required to include in the Implementation Guide? -
correct answer ✅Appendix A of the PA-DSS
During the application validation, who verifies that the instructions
within the IG are accurate, and that it contains the required
information? -
correct answer ✅The PA-QSA
who is subjected to comply with PCI DSS? -
correct answer ✅Any entity involved in payment card processing.
This includes merchants, processors, acquirers, issuers, and service
providers.
when do PCI DSS requirements apply? -
correct answer ✅wherever account data is stored, processed, or
transmitted.
