PCIP Compliance Reporting 5

Question 1

What is the role of the PCI SSC in enforcing PCI DSS compliance?

Accepted Answer

The PCI SSC maintains the standards; card brands and acquirers enforce compliance

Answer

The PCI SSC develops and maintains the standards but does not enforce compliance; enforcement is the responsibility of the payment card brands and acquiring banks.

Question 2

A merchant's annual ASV scan reveals a failing vulnerability 30 days before their compliance submission deadline. What must they do?

Accepted Answer

Remediate the vulnerability and obtain a passing scan before submission

Answer

Merchants must remediate identified vulnerabilities and achieve a passing ASV scan before submitting compliance documentation, as failing scan results are not acceptable.

Question 3

Which of the following scenarios requires a merchant to immediately notify their acquiring bank outside of the normal annual reporting cycle?

Accepted Answer

Suspecting a cardholder data breach

Answer

Suspected or confirmed cardholder data breaches must be reported to the acquiring bank immediately, regardless of the normal annual compliance reporting schedule.

Question 4

What happens to a merchant's transaction fees or processing privileges if they remain non-compliant with PCI DSS for an extended period?

Accepted Answer

Card brands may impose fines on the acquirer, who may pass them to the merchant

Answer

Card brands can assess fines against acquiring banks for non-compliant merchants, and acquirers typically pass these fines to the merchant, which may also include increased transaction fees.

Question 5

What does 'scoping' mean in the context of a PCI DSS assessment?

Accepted Answer

Identifying all system components that must comply with PCI DSS

Answer

Scoping is the process of identifying all system components, people, and processes included in or connected to the cardholder data environment that are subject to PCI DSS requirements.

(PCIP) Payment Card Industry Professional Practice Test

(PCIP) Payment Card Industry Professional Practice Test

PCIP Compliance Reporting 5