Ecommerce Ecommerce Payment & Security

Question 1

Which payment card industry standard must US ecommerce merchants comply with to protect cardholder data?

Accepted Answer

PCI DSS

Answer

PCI DSS (Payment Card Industry Data Security Standard) is the mandatory compliance framework for any merchant that stores, processes, or transmits cardholder data.

Question 2

What does SSL/TLS encryption protect in an ecommerce transaction?

Accepted Answer

Data in transit between browser and server

Answer

SSL/TLS encrypts data as it travels between the customer's browser and the web server, preventing interception by third parties.

Question 3

What is a payment gateway's primary function in ecommerce?

Accepted Answer

Securely transmitting transaction data between the customer, merchant, and bank

Answer

A payment gateway authorizes and securely routes transaction data between the shopper, the merchant's site, and the acquiring bank.

Question 4

Which fraud prevention tool analyzes hundreds of data points in real time to score the risk level of a transaction?

Accepted Answer

Fraud scoring / machine learning model

Answer

Real-time fraud scoring engines use machine learning to evaluate signals like IP address, device fingerprint, and purchase history to flag risky orders.

Question 5

What is 3D Secure (3DS) used for in online payments?

Accepted Answer

Adding an extra authentication step to verify the cardholder's identity

Answer

3D Secure adds an authentication layer — such as a one-time password — to verify the cardholder during checkout and reduce chargebacks.

Ecommerce Practice Test

Ecommerce Practice Test

Ecommerce Ecommerce Payment & Security