Quiz – PCI DSS Online Education

Take a moment to review with the two questions below. Keep going until you get the right answer, then click Submit.

How to comply

1. Alex is looking through a shared team folder for a reconciliation report. They come across a spreadsheet that seems to contain customer names, credit card numbers, and credit card expiration dates. What should they do? *

a. Keep it quiet as to not cause drama for their department.

b. Tell their supervisor and Treasury Operations immediately.

c. Write down a few of the card numbers to try on a terminal later in the day.

d. Nothing as there were no CVV numbers on the spreadsheet, so it isn’t a problem.

Incorrect. Please try again.

Correct!

Incorrect. Please try again.

2. Beth works at a merchant location that accepts a few payments over the phone each month. She is the only person set up with an SRED key device and virtual terminal to accept card payments on her team. Her colleague Greg occasionally covers the phones for her. If a customer calls in to make a credit card payment while Greg is covering the phones, and Beth is away from her desk, what should Greg do? *

a. Write down the card number for Beth to process when she returns from lunch.

b. Take down the customers name and phone number for Beth to call them to get the card number at a later time.

c. Use Beth’s virtual terminal log in to process the payment on the SRED key device.

Incorrect. Card numbers must never be written down. Please try again.

Correct! Also, if the department has an e-commerce web page, you may politely ask the customer to make a payment there.

Incorrect. You must never use someone else's username and password. Please try again.

3. A repair person comes in and informs your team that they are here to update your credit card machines. They’d like to know where each terminal is so they can get the updates completed. What should you do? *

a. Unlock the doors so they can get to all the machines to make the updates at your office

b. Call a manager or Treasury Ops to verify this repair person is approved to perform maintenance on your credit card machines.

Incorrect. Please try again.

Correct.

4. Ben comes into work and notices that the payment terminal on the main desk has moved to a new place with new cords plugged into the machine. What should he do when he notices this? *

a. Nothing, this layout works better for the office desk.

b. Notify the manager or Treasury Ops that these changes have been made, as the terminal could have been tampered with.

c. Process a payment to see if cards work, if they do everything should be fine and no further action is needed

Incorrect. Please try again.

Correct.

Incorrect. Please try again.

5. A customer calls into Ben’s office for help making a payment. They are not able to come in person and would like to pay over the phone. How can Ben help them? *

a. If available in your department, use the SRED pan pad to process the card information into the Virtual terminal with the customer on the phone.

b. Type the card information into the Virtual terminal using your computer keyboard with the customer on the phone.

c. Take down their credit card number to process later.

Correct.

Incorrect. Please try again.

6. Your department accepts payments using credit card authorization forms sent via USPS. The mail is delivered to a secure mail room and then the manager picks up the envelopes to process the payments on a virtual terminal. On busy days these envelopes sit in a pile before the manager has time to process them. How can you help your manager keep these payments safe? *

a. Process the payments and throw away the forms immediately

b. Process the payments and scratch out the card numbers with a black pen

c. Create a secure locked box or file cabinet where the forms can stay before they are processed. After authorizing the payment, the card data is cross-cut shredded

Incorrect. Please try again.

Correct.

7. A customer emails an order they want to place along with all of their credit card details for the order. How should you respond? *

a. Process the payment this one time and tell the customer not to send the details again

b. Let a manager or NUIT know the email sender, delete the message and don’t reply, forward, or print the message itself. Notify the sender that you are unable to accept credit card payments via email and provide the approved, secure options your department has to process credit card payments.

c. Delete the email and don’t tell anyone about it.

Incorrect. Please try again.

Correct.

Incorrect. Please try again.

8. Your department has a website where customers can make payments. A customer calls and says they are having trouble making the payment on their own computer. How can you help them? *

a. Visit the website using your own computer and keyboard to type in their information over the phone for them to process the payment. Forward the receipt to their email once complete.

b. Direct them back to the webpage and advise them of the best browser to use, help them clear their cache and stay with them on the phone to help them process the payment themselves from their computer.

Incorrect. Please try again.

Correct.

This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.