AD0-E722: Adobe Commerce Architect MasterDemo

By Adobe · Question Mode

QuestionQ15

Design and implement optimal solutions for Adobe Commerce to meet business needs

A small-business representative requires an Adobe Commerce Architect to create a custom integration for a third-party payment solution. They want to minimize the controls identified in their Self-Assessment Questionnaire as much as possible in order to achieve PCI compliance for their current Magento application.

Which approach satisfies the business requirements?

  • A Utilize the Advanced Encryption Standard (AES-256) algorithm to encrypt all customer-sensitive data from the payment module.
  • B Utilize the payment provider iframe system to isolate content of the embedded frame from the parent web page.
  • C Utilize a trusted signed certificate issued by a Certification Authority (CA) to secure each connection made by the payment solution protocol via HTTPS.
Explanation

Embedding the payment provider’s payment page in an iframe isolates the card-data capture elements from the merchant’s Magento application and lets the PCI DSS-compliant provider accept and process the payment data. When all payment-page elements originate directly from that provider, the merchant may qualify for the smaller SAQ A scope, subject to all applicable eligibility criteria. Encryption and HTTPS protect data but do not eliminate the merchant application’s handling of payment data or its associated PCI obligations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!