PCIP Study questions from PCI Training manual 2023 Questions and Answers 100% Verified How is skimming used to target PCI data? - Correct Answer Copying payment card numbers by tampering with POS devices, ATMs, Kiosks or copying the magnetic stripe using handheld skimmers.How is phishing used to target PCI data? - Correct Answer By doing reconnaissance work through social engineering and or breaking in using software vulnerabilities or e- mails.How can Payment Data be Monetized? - Correct Answer By skimming the card to get the full track of data, and then making another like card. Using the card information in a "Card-not-present transactions such as e-commerce or mail order, Telephone order.Card data is also sold in bulk to other criminals who perform their own fraud using the stolen data.Who all are targeted ? - Correct Answer Retail, Food and Beaverage, Hospitality, Financial Services, non-profit. EVERYONE!What is the PCI SSC ? - Correct Answer Payment Card Industry Security Service Counsel is an independent industry standards body providing oversight of the development and management of Payment Card Industry Data Security Standards on a global basis.What are some of the PCI SSC founding payment brands. - Correct Answer American Express, Discover Financial, JCB International, Master Card, Visa inc.What are the Resources provided by the PCI SSC? - Correct Answer PCI DSS, PA- DSS, P2PE, PTS (POI, HSM and PIN) Card Production, and supporting documents.Roster of QSAs, PA-QSAs, PCIPs, ASVs, validated payment applications, PTS Devices, and P2PE solutions PCI Security Standards Counsil FAQs Education and Outreach programs Participating Organization Membership, Community Meetings, feedback.What is the overview of PCI DSS? - Correct Answer Covers security of the environments that store, process or transmit account data.Environments receive account data from payment applications and other sources (e.g.., acquirers). 1 / 2
what is the overview of PCI PA-DSS - Correct Answer Covers secure payment applications to support PCI DSS compliance Payment application recieves account data from PIN-entry devices (PEDs) or other devices and begins payment transaction.What is the overview of PCI P2PE - Correct Answer Covers encryption, decryption, and Key management requirements for point to point encryption solutions.What is the overview of PCI PTS-POI? - Correct Answer Covers the protection of sensitive data at the point of interaction devices and their secure components, including cardholder PINs and account data, and the cryptographic keys used in connection with the protection of that cardholder data.What is the overview of PCI PTS-PIN Security? - Correct Answer Covers secure management, processing and transmission of personal identification number (PIN) data during online and offline payment card transaction processing.What is the overview of PCI PTS-HSM - Correct Answer Covers physical, logical and device security requirements for securing hardware security modules.What is the overview of PCI Card Production - Correct Answer Covers physical and logical security requirements for systems and business processes.What PCI DSS compliance program does American Express develop and maintain? - Correct Answer Data Security Operating Policy (DSOP) What PCI DSS compliance program does Discover develop and maintain? - Correct Answer Discover Information Security Compliance (DISC) What PCI does DSS compliance program does JCB develop and maintain? - Correct Answer Data Security Program What PCI does DSS compliance program does MasterCard develop and maintain? - Correct Answer Site Data Protection What PCI does DSS compliance program dose VISA Inc develop and maintain?What PCI does DSS compliance program dose MasterCard develop and maintain? - Correct Answer Cardholder Information Security Program (CISP) Account Information Security (AIS) program What is all included in the Payment brand Compliance programs? - Correct Answer Tracking and enforcement Penalties, fees, compliance deadlines
- / 2