A development team is creating an application used for contactless payments. The application must: - Be web-based - Capture and process the credit card information for a purchase. Which security…

The correct answer is D. Enable the encryption of network traffic. A web application that captures and processes credit card information must encrypt all network traffic to protect sensitive cardholder data, which is a fundamental requirement under PCI DSS. This means enabling TLS (Transport Layer Security) to secure data in transit. Choice C…

Application Deployment and Security

Question

A development team is creating an application used for contactless payments. The application must:

Be web-based
Capture and process the credit card information for a purchase.

Which security action must the web application use to gather and process the private customer data?

Options

AEnable RATs to monitor the web application remotely.
BDisable botnets to eliminate risks.
CDisable TLS to increase the connection speed.
DEnable the encryption of network traffic.

How the community answered

(22 responses)

A
5% (1)
B
5% (1)
D
91% (20)

Explanation

A web application that captures and processes credit card information must encrypt all network traffic to protect sensitive cardholder data, which is a fundamental requirement under PCI DSS. This means enabling TLS (Transport Layer Security) to secure data in transit. Choice C is explicitly wrong - disabling TLS removes encryption and exposes payment data. Choice A (RATs - Remote Access Trojans) are malware, not security tools. Choice B is nonsensical as a developer action - botnets are not something an application 'disables.' The only correct security action is enabling network traffic encryption.

Topics

#Web Security#Data Encryption#Secure Communication#PCI DSS

Community Discussion

No community discussion yet for this question.

Full 200-901 Practice