Ecommerce Ecommerce Payment & Security 2

Question 1

What is tokenization in the context of ecommerce payment security?

Accepted Answer

Replacing sensitive card data with a non-sensitive placeholder token

Answer

Tokenization substitutes actual card numbers with randomly generated tokens so that stored data is worthless if breached.

Question 2

Which US regulation requires websites to disclose data collection practices to consumers?

Accepted Answer

California Consumer Privacy Act (CCPA)

Answer

The CCPA grants California residents rights over their personal data and requires businesses to disclose how they collect, use, and sell that data.

Question 3

What does CVV/CVC stand for and why does ecommerce use it?

Accepted Answer

Card Verification Value/Code — proves the buyer physically has the card

Answer

CVV/CVC is the 3- or 4-digit security code on a card that confirms the purchaser has the physical card, reducing card-not-present fraud.

Question 4

What is the primary advantage of using a hosted payment page instead of an on-site form?

Accepted Answer

Card data never touches the merchant's servers, reducing PCI scope

Answer

A hosted payment page processes card data entirely on the payment provider's servers, so the merchant is largely removed from PCI DSS compliance scope.

Question 5

Which alternative payment method has grown rapidly in US ecommerce by letting shoppers split purchases into interest-free installments?

Accepted Answer

Buy Now Pay Later (BNPL)

Answer

BNPL services like Afterpay, Klarna, and Affirm allow customers to split a purchase into several installments, boosting conversion and average order value.

Ecommerce Practice Test

Ecommerce Practice Test

Ecommerce Ecommerce Payment & Security 2