PCI-DSS Fundamentals with all Correct & 100% Verified
Answers |Latest Update |Already Graded A+
Methods for Stealing Payment card data include:
a) Weak Passwords
b) Malware
c) Physical skimming
d) All of the options are correct ✔Correct Answer-d) All of the options are correct
The PCI DSS applies to:
a) Any entity that stores, processes, or transmits payment card account data
b) Service Providers only
c) Merchants only
d) Merchants and third party processors (TTPs) only ✔Correct Answer-a) Any entity that stores,
processes, or transmits payment card account data
The PCI DSS applies to:
a) Any entity that stores, processes, or transmits payment card account data
b) Service Providers only
c) Merchants only
d) Merchants and third party processors (TTPs) only ✔Correct Answer-a) Any entity that stores,
processes, or transmits payment card account data
The P2PE Standard Covers:
a) Secure payment applications for processing transactions
b) Encryption, decryption, and key management requirements for point-to-point encryption
solutions
c) Physical security requirements for manufacturing payment cards
d) Mechanisms used to protect the PIN and encrypted PIN Blocks ✔Correct Answer-b) Encryption,
decryption, and key management requirements for point-to-point encryption solutions
The standard for validating off-the-shelf payment applications used in authorizations and settlement
is:
a) PCI P2PE
b) PA-DSS
c) PCI PTS
d) PCI DSS ✔Correct Answer-b) PA-DSS
Merchants using PA-DSS validated payment applications are automatically PCI DSS compliant.
a) True
b) False ✔Correct Answer-b) False
Which of the below functions is associated with acquirers?
a) Provide settlement services to a merchant
b) Provide clearing services to a merchant
c) Provide authorization services to a merchant
d) All of the options ✔Correct Answer-d) All of the options
Which of the following entities will ultimately approve a purchase?
, a) Issuer
b) Acquirer
c) Payment Transaction Gateway
d) Merchant ✔Correct Answer-a) Issuer
Which step does the payment brand network provide complete reconciliation to the merchants'
bank?
a) Settlement
b) Authorization
c) Approval
d) Clearing ✔Correct Answer-d) Clearing
A company that _____________________ is considered to be a service provider.
a) Controls or could impact the security of another entity's cardholder data
b) Is a payment card brand
c) Is a founding member of PCI SSC
d) Is not also a merchant ✔Correct Answer-a) Controls or could impact the security of another
entity's cardholder data
Which of the following are examples of service providers?
(choose all that apply)
a) Data Center hosting providers
b) Telcom providers (only communication link)
c) Payment Gateways
d) ISOs ✔Correct Answer-a) Data Center hosting providers
c) Payment Gateways
d) ISOs
Which of the following are parts of the Payment Brand role?
(Select all that apply)
a) Offer training for QSAs, PA-QSA and ASVs
b) Endorse QSA, PA-QSA and ASV company qualification criteria
c) Develop and enforce compliance programs
d) Accept validation documentation from QSAs, PA-QSA and ASVs ✔Correct Answer-b) Endorse
QSA, PA-QSA and ASV company qualification criteria
c) Develop and enforce compliance programs
d) Accept validation documentation from QSAs, PA-QSA and ASVs
Merchant obligations may include submitting their compliance status to multiple entities.
a) True
b) False ✔Correct Answer-a) True
The decision about a merchant's level is made by the :
a) Merchant's acquirer
b) Merchant's QSA
c) Merchant
d) Payment Brands ✔Correct Answer-a) Merchant's acquirer
Level 1 and 2 merchants must include ______________ as part of their PCI DSS compliance
validation reporting process?
a) A report from their QSA
Answers |Latest Update |Already Graded A+
Methods for Stealing Payment card data include:
a) Weak Passwords
b) Malware
c) Physical skimming
d) All of the options are correct ✔Correct Answer-d) All of the options are correct
The PCI DSS applies to:
a) Any entity that stores, processes, or transmits payment card account data
b) Service Providers only
c) Merchants only
d) Merchants and third party processors (TTPs) only ✔Correct Answer-a) Any entity that stores,
processes, or transmits payment card account data
The PCI DSS applies to:
a) Any entity that stores, processes, or transmits payment card account data
b) Service Providers only
c) Merchants only
d) Merchants and third party processors (TTPs) only ✔Correct Answer-a) Any entity that stores,
processes, or transmits payment card account data
The P2PE Standard Covers:
a) Secure payment applications for processing transactions
b) Encryption, decryption, and key management requirements for point-to-point encryption
solutions
c) Physical security requirements for manufacturing payment cards
d) Mechanisms used to protect the PIN and encrypted PIN Blocks ✔Correct Answer-b) Encryption,
decryption, and key management requirements for point-to-point encryption solutions
The standard for validating off-the-shelf payment applications used in authorizations and settlement
is:
a) PCI P2PE
b) PA-DSS
c) PCI PTS
d) PCI DSS ✔Correct Answer-b) PA-DSS
Merchants using PA-DSS validated payment applications are automatically PCI DSS compliant.
a) True
b) False ✔Correct Answer-b) False
Which of the below functions is associated with acquirers?
a) Provide settlement services to a merchant
b) Provide clearing services to a merchant
c) Provide authorization services to a merchant
d) All of the options ✔Correct Answer-d) All of the options
Which of the following entities will ultimately approve a purchase?
, a) Issuer
b) Acquirer
c) Payment Transaction Gateway
d) Merchant ✔Correct Answer-a) Issuer
Which step does the payment brand network provide complete reconciliation to the merchants'
bank?
a) Settlement
b) Authorization
c) Approval
d) Clearing ✔Correct Answer-d) Clearing
A company that _____________________ is considered to be a service provider.
a) Controls or could impact the security of another entity's cardholder data
b) Is a payment card brand
c) Is a founding member of PCI SSC
d) Is not also a merchant ✔Correct Answer-a) Controls or could impact the security of another
entity's cardholder data
Which of the following are examples of service providers?
(choose all that apply)
a) Data Center hosting providers
b) Telcom providers (only communication link)
c) Payment Gateways
d) ISOs ✔Correct Answer-a) Data Center hosting providers
c) Payment Gateways
d) ISOs
Which of the following are parts of the Payment Brand role?
(Select all that apply)
a) Offer training for QSAs, PA-QSA and ASVs
b) Endorse QSA, PA-QSA and ASV company qualification criteria
c) Develop and enforce compliance programs
d) Accept validation documentation from QSAs, PA-QSA and ASVs ✔Correct Answer-b) Endorse
QSA, PA-QSA and ASV company qualification criteria
c) Develop and enforce compliance programs
d) Accept validation documentation from QSAs, PA-QSA and ASVs
Merchant obligations may include submitting their compliance status to multiple entities.
a) True
b) False ✔Correct Answer-a) True
The decision about a merchant's level is made by the :
a) Merchant's acquirer
b) Merchant's QSA
c) Merchant
d) Payment Brands ✔Correct Answer-a) Merchant's acquirer
Level 1 and 2 merchants must include ______________ as part of their PCI DSS compliance
validation reporting process?
a) A report from their QSA
