PCI part 1

What should i do to detect a skimming attack?

• Regularly review sales terminals

• Call the bank

• Make sales terminals available to anyone

If i access and handle payment card data at work my responsible is?

• To be aware of the PCI DSS standard and understand the impact it has on my work.

• Before contracting a service with a third party that is going to store, process and/or transmit payment card data, i must confirm they comply with the PCI DSS standard.

• Both are correct

Who is required to comply with PCI DSS standard?

• Internal or external who do not access payment card data

• The people process and technologies that store, process or transmit payment card data

• Any company technology or process

What data indicates the applicability of PCI DSS?

• The cardholder name

• CVV

• PAN

Can i share password that i use to access computer system?

• Yes, but only for close companions

• No, never

• Yes, if my manager ask me to

Through which channels can i request card data?

• Email

• Secure mail

• Phone

The _______________ is the bank the business uses to process card payments:

• Acquirer

• Payment brand

• VISA

Can i store payment card data on a device such as USB, DVD, hard drive, etc?

• No never

• Yes, if i delete them safely afterwards

• Yes, it the device belongs to company

What is the PAN for the card ?

• The name of the card holder

• The magnetic strip on the card

• The 16-digit card number (15 for AMEX)

What should i do with any piece of paper that contains payment card data?

• Keep it on locked drawer

• Safely destroy it

• Both are correct