E-Commerce Development Payment Processing 3

Question 1

What does PCI DSS SAQ A eligibility require for an e-commerce merchant?

Accepted Answer

All payment processing is fully outsourced and no card data touches merchant systems

Answer

SAQ A applies when the merchant outsources all cardholder data functions and uses an iframe or redirect so card data never touches the merchant's environment.

Question 2

Which payment method type is classified as a 'pull' payment?

Accepted Answer

ACH debit authorized by the account holder

Answer

ACH debit is a pull payment where the merchant pulls funds from the customer's account using a pre-authorized mandate.

Question 3

What is the typical window for a customer to file a chargeback with their card issuer?

Accepted Answer

60–120 days

Answer

Most card networks allow customers 60 to 120 days from the transaction or statement date to dispute a charge and initiate a chargeback.

Question 4

Which Stripe webhook event should trigger order fulfillment in an e-commerce application?

Accepted Answer

checkout.session.completed

Answer

The checkout.session.completed event confirms the entire checkout flow finished successfully, making it the correct trigger for fulfillment.

Question 5

What is the difference between authorization and capture in card payment processing?

Accepted Answer

Authorization reserves funds on the card; capture actually moves the money

Answer

Authorization places a hold on the cardholder's funds, while capture is the subsequent step that actually transfers those funds to the merchant.

E-Commerce Development Practice Test

E-Commerce Development Practice Test

E-Commerce Development Payment Processing 3