APRP APRP Quality & Compliance 4

Question 1

Which data element, if compromised, allows fraudsters to clone a physical payment card?

Accepted Answer

Track 1 or Track 2 magnetic stripe data

Answer

Track 1 and Track 2 magnetic stripe data contain all information needed to encode a counterfeit card, making their protection critical under PCI DSS.

Question 2

An APRP candidate reviews a processor's audit findings and sees 'scope creep' flagged as a deficiency. What does this mean in a PCI DSS context?

Accepted Answer

Systems that touch cardholder data were added without updating the cardholder data environment boundary

Answer

PCI DSS scope creep occurs when new systems enter the cardholder data environment without proper documentation and security controls being applied to them.

Question 3

What is 'network tokenization' and how does it improve payment security?

Accepted Answer

Substituting a PAN with a token issued by the card network, valid only for a specific merchant or device

Answer

Network tokenization replaces sensitive PANs with network-issued tokens scoped to a specific merchant or device, limiting the value of intercepted payment credentials.

Question 4

A bank files a Suspicious Activity Report (SAR) on a customer. Under BSA regulations, what is the bank prohibited from doing?

Accepted Answer

Disclosing to the customer that a SAR has been filed

Answer

BSA regulations prohibit 'tipping off' — informing the subject of a SAR that one has been filed, to avoid alerting potential money launderers.

Question 5

In the context of payments compliance, what does 'regulatory capital' refer to for an acquiring bank?

Accepted Answer

Capital reserves that regulators require banks to hold against risk-weighted assets

Answer

Regulatory capital refers to the minimum capital buffers mandated by bank regulators (such as under Basel III) to absorb losses from risk-weighted exposures.

APRP - Accredited Payments Risk Professional Practice Test

APRP - Accredited Payments Risk Professional Practice Test

APRP APRP Quality & Compliance 4