IPA IP 2022 Question 55

A question IPA Japan published in 令和4年度 ITパスポート試験公開問題問55, translated into English. ITPEC is based on the same exams.

Which of the following is an appropriate description of PCI DSS in information security?

a)A security standard that is required of business operators that handle credit card informationb)A semiconductor chip that is built into computers and other such devices and performs security-related processingc)An organization that responds to security incidents of computers and networksd)A system that monitors the communication of servers and networks, detects unauthorized access, and prevents attacks

Explanation

A security standard for businesses that handle credit card information — PCI DSS (Payment Card Industry Data Security Standard) is the card industry's security standard.

PCI DSS was drawn up by the PCI Security Standards Council, founded by the major international card brands (Visa, Mastercard, American Express, JCB, Discover). Every business that stores, processes or transmits cardholder data, such as merchants, payment service providers and card issuers, must meet it. Its requirements cover, among others, firewalls and secure configurations, protection and encryption of stored card data, vulnerability management, access control, logging and monitoring, regular testing and a security policy.

Answer (a)

Why not others:

•(b) — a chip built into a device for security processing (keys, encryption, integrity checks) is a TPM (Trusted Platform Module)
•(c) — an organization that responds to computer and network security incidents is a CSIRT
•(d) — a system that monitors traffic, detects unauthorized access and blocks attacks is an IPS (intrusion prevention system)

Key rule: PCI DSS = the security standard for credit card data; TPM = security chip, CSIRT = incident response team, IPS = detects and blocks intrusions.

Security · AI-written, may contain errors

Previous Next

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.