PCIP Study questions from PCI Training manual
\NEWEST VERSION WITH COMPLETE QUESTIONS AND
CORRECT DETAILED ANSWERS \VERIFIED 100% GRADED
A+\BRAND NEW!!
What is PA-DSS? Payment Application Data Security Standard.
What does PA-DSS applies to? Third party payment applications such as POS, shopping
carts, etc.....
What does a PA-DSS do? Ensures a payment application can function in a PCI
DSS compliant manner.
If a merchant uses a PA-DSS does it No
mean they are PCI- DSS compliant?
Are PA-DSS in scope for PCI DSS? Yes
What is a PCI P2PE? Point to Point Encryption.
What all must be included in a P2PE Secure encryption of payment card at
solution.
the point of interaction. P2PE-vallidated
applications at the point of interaction.
Secure management of encryption and decryption
devices.
Management of the decryption environment and all
decrypted account data. Use of secure encryption
methodologies and cryptographic key operations,
including key generation, distribution, loading/injection,
administration and usage.
What is the relationship between PA- PA-DSS must facilitate and not prevent DSS compliance.
DSS and PCI DSS?
What is the relationship between P2PE Incorprates requirements from PTS, PCI=DSS, PA-
and PCI-DSS?
, DSS and PCI PIN to protect account data from the
point of capture until it reaches the payment
processor.
What does PTS stand for? PIN Transaction Security
what is PTS? PTS is a set of modular evaluation requirements
managed by PCI SSC, for PIN acceptance POI
terminals.
What is the PTS program about? The program ensures terminals cannot be
manipluated or attached to allow the capture of
Sensitive Authentication data, nor allow access to
clear-text PINs or Keys.
What does SRED stand for? Secure Read and Exchange Module
What does SRED allow? It allows terminals to b approved for the security
encrption of cardholder data as part of the Point to
Point Encryption prgram.
What does PIN mean? Personal Identification Number.
What are required in the PCI PIN Management, processing and transmission.
security Requirements
What is a Cardholder? Customer, individual making a purchase of goods or
services. The process could involve a card present
or not present transaction.
Who is the Issuer? Bank or organization issuing a payment card on behalf
of a Payment Brand (e.g. Visa, Master Card)
Which Payment Brands issue credit American Express, Discover, JCB
cards directly?
Who is the Merchant? Organization accepting the payment card for payment
during a purchase.
What is an Acquirer? This is the Bank or entity the merchant uses to process
their payment card transactions.
What does the Acquirer do? It receives authorization request from the merchant
and forwards it to the issuer for approval.
\NEWEST VERSION WITH COMPLETE QUESTIONS AND
CORRECT DETAILED ANSWERS \VERIFIED 100% GRADED
A+\BRAND NEW!!
What is PA-DSS? Payment Application Data Security Standard.
What does PA-DSS applies to? Third party payment applications such as POS, shopping
carts, etc.....
What does a PA-DSS do? Ensures a payment application can function in a PCI
DSS compliant manner.
If a merchant uses a PA-DSS does it No
mean they are PCI- DSS compliant?
Are PA-DSS in scope for PCI DSS? Yes
What is a PCI P2PE? Point to Point Encryption.
What all must be included in a P2PE Secure encryption of payment card at
solution.
the point of interaction. P2PE-vallidated
applications at the point of interaction.
Secure management of encryption and decryption
devices.
Management of the decryption environment and all
decrypted account data. Use of secure encryption
methodologies and cryptographic key operations,
including key generation, distribution, loading/injection,
administration and usage.
What is the relationship between PA- PA-DSS must facilitate and not prevent DSS compliance.
DSS and PCI DSS?
What is the relationship between P2PE Incorprates requirements from PTS, PCI=DSS, PA-
and PCI-DSS?
, DSS and PCI PIN to protect account data from the
point of capture until it reaches the payment
processor.
What does PTS stand for? PIN Transaction Security
what is PTS? PTS is a set of modular evaluation requirements
managed by PCI SSC, for PIN acceptance POI
terminals.
What is the PTS program about? The program ensures terminals cannot be
manipluated or attached to allow the capture of
Sensitive Authentication data, nor allow access to
clear-text PINs or Keys.
What does SRED stand for? Secure Read and Exchange Module
What does SRED allow? It allows terminals to b approved for the security
encrption of cardholder data as part of the Point to
Point Encryption prgram.
What does PIN mean? Personal Identification Number.
What are required in the PCI PIN Management, processing and transmission.
security Requirements
What is a Cardholder? Customer, individual making a purchase of goods or
services. The process could involve a card present
or not present transaction.
Who is the Issuer? Bank or organization issuing a payment card on behalf
of a Payment Brand (e.g. Visa, Master Card)
Which Payment Brands issue credit American Express, Discover, JCB
cards directly?
Who is the Merchant? Organization accepting the payment card for payment
during a purchase.
What is an Acquirer? This is the Bank or entity the merchant uses to process
their payment card transactions.
What does the Acquirer do? It receives authorization request from the merchant
and forwards it to the issuer for approval.
