AD0-E722: Adobe Commerce Architect Master

By Adobe · Question Mode

QuestionQ15

Design and implement optimal solutions for Adobe Commerce to meet business needs

A small-business representative requires an Adobe Commerce Architect to create a custom integration for a third-party payment solution. They want to minimize the controls identified in their Self-Assessment Questionnaire as much as possible in order to achieve PCI compliance for their current Magento application.

Which approach satisfies the business requirements?

Explanation

Embedding the payment provider’s payment page in an iframe isolates the card-data capture elements from the merchant’s Magento application and lets the PCI DSS-compliant provider accept and process the payment data. When all payment-page elements originate directly from that provider, the merchant may qualify for the smaller SAQ A scope, subject to all applicable eligibility criteria. Encryption and HTTPS protect data but do not eliminate the merchant application’s handling of payment data or its associated PCI obligations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!