PCI SSCPCI DSSEncryptionEASYFree question
What is the purpose of a digital certificate in PCI DSS encryption?
- A.To compress the payload before transmission and reduce latency, ensuring each packet fits the MTU of the link
- B.To encrypt the bulk data with a symmetric key and sign each log entry, ensuring auditors can verify retention
- C.To verify the identity of a server or entity and establish trust for encrypted communications, ensuring data is sent to the legitimate recipient
- D.To store the cardholder name and expiry date in the certificate, ensuring the payment terminal can display them
Why C is correct
Digital certificates verify entity identity and establish trust for encrypted communications, ensuring cardholder data is transmitted to legitimate recipients.
Know someone studying for PCI DSS? Send them this one.