問61
頻出度★★★
クレジットカードの会員データを安全に取り扱うことを目的として策定された, クレジットカード情報の保護に関するセキュリティ基準はどれか。
令和3年度 ITパスポート試験 問61
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 61
Incorrectア
NFC (Near Field Communication) is a short-range wireless communication standard operating over a distance of a few centimeters, a communication technology used for tap-to-pay and data exchange with IC cards and smartphones. It can serve as a means of payment, but it is not a standard for protecting card information.
- イ
正解 PCI DSS stands for “Payment Card Industry Data Security Standard”. It is a security standard jointly developed by the international card brands (such as Visa and Mastercard) for handling credit card cardholder data securely. For businesses that store, process, or transmit cardholder data such as card numbers, it defines concrete requirements including network protection, data encryption, access control, and monitoring, which matches the question’s “security standard for protecting credit card information” exactly. Therefore the correct answer is イ.
Incorrectウ
PCI Express (PCIe) is an expansion bus (interface) standard for connecting the CPU to expansion cards (such as graphics cards and SSDs) at high speed inside a computer. Although its name contains “PCI”, its meaning is entirely different, and it has nothing to do with credit card security standards.
Incorrectエ
RFID (Radio Frequency Identification) is a technology that reads and writes IC tag information contactlessly using radio waves, used for transit IC cards and product/inventory management. It is an identification technology, not a security standard for protecting card information.
ここがポイント
- Remember that PCI DSS is a security standard established by the international card brands to protect credit card cardholder data.
- Do not confuse it with the similarly named “PCI Express” (an expansion bus standard inside a PC) or with NFC and RFID (both wireless communication/identification technologies).
用語