PCIP Remediation Test Questions with Verified Correct Answers

PCIP Remediation Test Questions with Verified
Correct Answers
CAV - Card Authentication Value

JCB payment cards

PAN CVC - Card Validation Code

MasterCard payment cards

CVV - Card Verification Value

Visa and Discover payment cards

CSC - Card Security Code

American Express

CID - Card Identification Number

American Express and Discover payment cards

CAV2 - Card Authentication Value 2

JCB payment cards

PAN CVC2 - Card Validation Code 2

MasterCard payment cards

CVV2 - Card Verification Value 2

Visa payment cards

PCI Informational Supplements

Do not supercede, replace or extend PCI DSS requirements

, Patches for lower-risk systems can be installed within?

2-3 months

SAQ A

Card-not-present merchants (e-commerce or mail/telephone-order) that have fully outsourced

all cardholder data functions to PCI DSS compliant third-party service providers, with no

electronic storage, processing, or transmission of any cardholder data on the merchant's

systems or premises.

Not applicable to face-to-face channels.

SAQ A-EP

E-commerce merchants who outsource all payment processing to PCI DSS validated third

parties, and who have a website(s) that doesn't directly receive cardholder data but that can

impact the security of the payment transaction. No electronic storage, processing, or

transmission of any cardholder data on the merchant's systems or premises.

Applicable only to e-commerce channels.

SAQ B

Merchants using only:

• Imprint machines with no electronic cardholder data storage; and/or

• Standalone, dial-out terminals with no electronic cardholder data storage.

Not applicable to e-commerce channels.

SAQ B-IP

Merchants using only standalone, PTS-approved payment terminals with an IP connection to

the payment processor, with no electronic cardholder data storage.

Not applicable to e-commerce channels.