PCIP Study Guide 2023 with complete solutions

PA-DSS - Answer- Payment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - Answer- Pin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - Answer- Hardware Security Module Pin Standard (not required but may assist in becoming compliant) P2PE - Answer- Point to Point Encryption Standard (Most helpful standard to reduce scope) SRED - Answer- Secure Read and Exchange Module allows terminals to be approved for secure encryption of cardholder data. POI Examples - Answer- Attended : Cash Registers Unattended Encrypted PIN Pads : ATM Unattended Payment Terminals : Gas Pump PCI PIN Security Requirements - Answer- Management Processing Transmission Payment Card Flow - Answer- Cardholder presents card - Acquirer asks payment brand to determine issuer - Payment brand network determines issuer and requests approval- Issuer approves purchase- Payment brand network sends approval to the acquirer - Acquirer sends approval to merchant- Cardholder completes purchase and receives receipt. Aquirer (Also Called?) - Answer- -Merchant Bank -Independent Sale Organization (ISO) -Payment Brand (Amex, Discover, JCB) -Never Visa or Mastercard Payment Card Flow (Clearing) - Answer- Acquirer sends purchase information to the payment brand network - payment brand network sends purchase information to the issuer - issuer prepares data for cardholder statement - payment brand network provides complete reconciliation to acquirer.Payment Card Flow (Settlement) - Answer- Issuer determines acquirer via the payment brand network - Issuer sends payment