QuestionQ13

Security Test Techniques

You have been asked to conduct end-to-end testing of online payment processing, with a focus on security testing to validate secure transmission of payment details (for example, enforcing HTTPS), appropriate encryption of sensitive data (for example, credit card numbers), and compliance with standards such as PCI DSS.

Which of the following end-to-end security tests validates one of the requirements mentioned above?

  • A Verifying that the system complies with the CWE, CVE, and CAPEC standards
  • B Verifying the security of Wi-Fi networks by identifying vulnerabilities such as weak encryption
  • C Verifying that all payment data is transmitted over HTTPS using strong encryption protocols
  • D Verifying that the system correctly obfuscates sensitive data such as credit card numbers
Explanation

PCI DSS requires cardholder data sent over open or public networks to be protected by strong cryptography and secure protocols. Verifying that all payment data is transmitted over HTTPS using strong encryption directly tests that requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!