PCIP Study Guide with Complete Solutions

PA-DSS - ANSWER-Payment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - ANSWER-Pin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - ANSWER-Hardware Security Module Pin Standard (not required but may assist in becoming compliant) P2PE - ANSWER-Point to Point Encryption Standard (Most helpful standard to reduce scope) SRED - ANSWER-Secure Read and Exchange Module allows terminals to be approved for secure encryption of cardholder data. POI Examples - ANSWER-Attended : Cash Registers Unattended Encrypted PIN Pads : ATM Unattended Payment Terminals : Gas Pump PCI PIN Security Requirements - ANSWER-Management Processing Transmission Payment Card Flow - ANSWER-Cardholder presents card - Acquirer asks payment brand to determine issuer - Payment brand network determines issuer and requests approval- Issuer approves purchase- Payment brand network sends approval to the acquirer - Acquirer sends approval to merchant- Cardholder completes purchase and receives receipt. Aquirer (Also Called?) - ANSWER--Merchant Bank -Independent Sale Organization (ISO) -Payment Brand (Amex, Discover, JCB) -Never Visa or Mastercard Payment Card Flow (Clearing) - ANSWER-Acquirer sends purchase information to the payment brand network - payment brand network sends purchase information to the issuer - issuer prepares data for cardholder statement - payment brand network provides complete reconciliation to acquirer. PA-DSS - ANSWER-Payment Application Data Security Standard (POS, shopping carts, etc.) PTS (POI) - ANSWER-Pin Transaction Security Point of Interaction Standard (Attended and Unattended Devices) HSM (PIN) - ANSWER-Hardware Security Module Pin Standard (not required but may assist in becoming compliant) P2PE - ANSWER-Point to Point Encryption Standard (Most helpful standard to reduce scope) SRED - ANSWER-Secure Read and Exchange Module allows terminals to be approved for secure encryption of cardholder data. POI Examples - ANSWER-Attended : Cash Registers Unattended Encrypted PIN Pads : ATM Unattended Payment Terminals : Gas Pump PCI PIN Security Requirements - ANSWER-Management Processing Transmission Payment Card Flow - ANSWER-Cardholder presents card - Acquirer asks payment brand to determine issuer - Payment brand network determines issuer and requests approval- Issuer approves purchase- Payment brand network sends approval to the acquirer - Acquirer sends approval to merchant- Cardholder completes purchase and receives receipt. Aquirer (Also Called?) - ANSWER--Merchant Bank -Independent Sale Organization (ISO) -Payment Brand (Amex, Discover, JCB) -Never Visa or Mastercard Payment Card Flow (Clearing) - ANSWER-Acquirer sends purchase information to the payment brand network - payment brand network sends purchase information to the issuer - issuer prepares data for cardholder statement - payment brand network provides complete reconciliation to acquirer.