Exam 350-201 topic 1 question 97 discussion

A. Mask PAN numbers

ChatGPT: To comply with PCI DSS standards for hardening systems, the action needed is to encrypt access (i.e., encrypt communication channels for transmitting sensitive payment data). This ensures that payment card information is securely transmitted and protected from unauthorized access.

To comply with PCI standards for hardening systems, especially for an e-commerce website with multiple points of sale, it is essential to encrypt personal data. This includes any information that can be used to identify an individual, such as names, addresses, and credit card numbers. Encryption helps protect this data during transmission and storage, reducing the risk of unauthorized access and data breaches2.

Card holder data (CHD) on storage should be masked CHD during processing should be encrypted. I think this question is about access so it should be encryption. https://blog.rsisecurity.com/comprehensive-guide-to-pci-dss-masking-requirements-for-cardholder-data/

B. Encrypt personal data. To comply with PCI standards for hardening the systems, personal data, including credit card information, needs to be encrypted. Masking PAN (Primary Account Number) numbers can help reduce the risk of unauthorized access, but it is not enough to comply with the standard. Encrypting access is also not enough as it does not address the requirement to encrypt sensitive data. Masking sales details can help protect sensitive information, but it is not enough to comply with the PCI standards for hardening systems. - ChatGPT

A. Mask PAN numbers