Public Health Nutrition & Disease Prevention Flashcards

What is the main goal of PCI DSS?

Answer: To ensure payment data security.

PCI DSS stands for Payment Card Industry Data Security Standard, and its main goal is to ensure payment data security. It sets forth a comprehensive set of requirements for all entities that process, store, or transmit credit card information. Compliance helps protect cardholder data from breaches and reduces the risk of credit card fraud.

What is tokenization in payment security?

Answer: Replacing sensitive data with tokens.

Tokenization in payment security is the process of replacing sensitive data, such as a credit card number, with a unique, non-sensitive identifier called a token. This token holds no intrinsic value and cannot be reverse-engineered to reveal the original data. If a system storing tokens is breached, the actual sensitive payment information remains protected, significantly enhancing security.

Which protocol secures data during online payment transactions?

Answer: HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, which uses SSL/TLS encryption to protect data transmitted between a user's browser and a website. This encryption is essential for securing sensitive information like credit card details during online payment transactions, preventing eavesdropping and tampering.

What is a payment gateway’s role?

Answer: Processing payments online.

A payment gateway acts as a secure intermediary between a customer, the merchant, and the bank during an online transaction. Its primary role is to authorize and process credit card or other electronic payments, ensuring the secure transmission of financial data from the customer to the payment processor. This enables businesses to accept online payments efficiently and safely.

What is multi-factor authentication (MFA)?

Answer: Multiple verification factors.

Multi-factor authentication (MFA) is a security system that requires users to provide two or more verification factors to gain access to an account or system. This typically combines something the user knows (like a password), something the user has (like a phone or token), and/or something the user is (like a fingerprint). MFA significantly enhances security by making it much harder for unauthorized users to access accounts, even if they compromise one factor.

What tool detects suspicious payment activity?

Answer: Fraud detection system

A fraud detection system is a specialized tool designed to identify and prevent fraudulent payment activities. It uses algorithms, machine learning, and rule-based systems to analyze transaction data for patterns and anomalies that indicate potential fraud. This proactive monitoring helps businesses protect themselves and their customers from financial losses due to scams or unauthorized transactions.

What does SSL stand for?

Answer: Secure Sockets Layer

SSL stands for Secure Sockets Layer, which is a cryptographic protocol designed to provide communication security over a computer network. While largely superseded by TLS (Transport Layer Security), the term SSL is still commonly used to refer to the encryption technology that secures internet connections, especially for websites using HTTPS. It ensures data privacy and integrity between a client and a server.

Why is PCI compliance important?

Answer: Protects payment data and reduces fraud risk.

PCI DSS (Payment Card Industry Data Security Standard) compliance is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Its importance lies in protecting sensitive payment data from breaches and reducing the risk of credit card fraud. Adhering to PCI standards helps safeguard customer financial information and maintain trust.

Which is a secure way to store payment information?

Answer: Encrypted storage and tokenization.

Securely storing payment information is critical to prevent data breaches and fraud. Encrypted storage scrambles sensitive data, making it unreadable to unauthorized parties, while tokenization replaces actual payment card numbers with unique, non-sensitive tokens. Both methods significantly reduce the risk of compromise, ensuring that even if a system is breached, the actual payment details remain protected.