PCI SSCPCI DSSEncryptionEASYFree question
What is AES and why is it relevant to PCI DSS?
- A.Advanced Encryption Standard is a retired block cipher with a 56-bit key that PCI DSS prohibits for protecting stored cardholder data and keys in transit
- B.Advanced Encryption Standard is a widely used symmetric encryption algorithm accepted by PCI DSS for protecting cardholder data at rest and in transit
- C.Advanced Encryption Standard is a public key algorithm used by PCI DSS for signing certificates and negotiating session keys during the TLS handshake
- D.Advanced Encryption Standard is a hashing algorithm that PCI DSS accepts for rendering stored PAN unreadable and irreversible
Why B is correct
AES is a NIST-approved symmetric encryption algorithm widely used and accepted by PCI DSS for protecting cardholder data.
Know someone studying for PCI DSS? Send them this one.