IPA IP 2021 Question 61
A question IPA Japan published in 令和3年度 ITパスポート試験 公開問題 問61, translated into English. ITPEC is based on the same exams.
Which of the following is the security standard concerning the protection of credit card information that was established for the purpose of handling credit card member data securely?
Explanation
PCI DSS — the card industry's security standard for every business that stores, processes or transmits credit card member data.
PCI DSS (Payment Card Industry Data Security Standard) was drawn up by the PCI Security Standards Council, founded by the major card brands. It sets requirements such as building and keeping a secure network, protecting stored cardholder data, encrypting card data sent over open networks, restricting access to it, and regularly monitoring and testing the systems. Merchants and service providers that handle card data are expected to comply.
Answer (b)
Why not others:
- •(a) NFC — Near Field Communication, short-range wireless communication of a few centimetres used by contactless IC cards and smartphone payments; a communication method, not a data-protection standard
- •(c) PCI Express — a serial bus standard for connecting expansion cards inside a computer; only the letters PCI are shared
- •(d) RFID — identifying objects by reading IC tags over radio; a technology, not a security standard
Key rule: PCI DSS is the security standard for credit card data; PCI Express is a computer bus, and NFC and RFID are wireless technologies.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.