PCI CPSA Exam - Topic 1 Question 9 Discussion

Actual exam question for PCI's CPSA exam

Question #: 9
Topic #: 1

[All CPSA Questions]

A vendor hosts virtual secure elements holding cardholder information in their data center. When a cardholder makes a purchase, the vendor creates a payment token which is sent to the cardholder's mobile device. Which of the following best describes the vendor's activities?

ACard personalization

BHost Card Emulation (HCE) provisioning

CSecure Element (SE) provisioning

DOver-the-air (OTA) provisioning

Show Suggested Answer

Suggested Answer: B

by Mireya at Jul 30, 2023, 12:20 PM

Limited Time Offer

25%

Off

Get Premium CPSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elenor

4 months ago

Not sure about that, seems risky to me.

upvoted 0 times

...

Cory

4 months ago

Wait, are they really holding card info in their data center?

upvoted 0 times

...

Lore

4 months ago

I think it's more about OTA provisioning.

upvoted 0 times

...

Brynn

4 months ago

Definitely not card personalization!

upvoted 0 times

...

Valentine

5 months ago

Sounds like HCE provisioning to me.

upvoted 0 times

...

Basilia

5 months ago

I think the vendor's activities are more about secure elements, but I’m leaning towards OTA provisioning since it involves sending tokens.

upvoted 0 times

...

Glenn

5 months ago

I’m a bit confused about the difference between SE provisioning and OTA provisioning. They seem related, but I can’t recall the specifics.

upvoted 0 times

...

Roslyn

5 months ago

This question feels similar to one we practiced on HCE provisioning. I think that might be the right answer.

upvoted 0 times

...

Eveline

5 months ago

I remember studying about card personalization, but I’m not sure if that’s what they mean here.

upvoted 0 times

...

Johnetta

6 months ago

This seems like a straightforward question about IT governance and strategic planning. I'll need to carefully consider the options and think about the primary purpose of reexamining the strategic plan.

upvoted 0 times

...

Jacquelyne

6 months ago

I'm pretty confident the answer is B, installadm set-criteria. The question mentions generating a "custom system configuration profile", and that command is used to set the installation criteria for AI clients.

upvoted 0 times

...

Doyle

6 months ago

This seems like a straightforward question. I'd start by verifying the Analytics profile is assigned to the application's virtual server, as that's the first step.

upvoted 0 times

...

Jillian

11 months ago

I bet the vendor is using some 'secure elements' made of duct tape and paperclips. That's the only way I can imagine this working!

upvoted 0 times

Georgiann

10 months ago

User 3: Yeah, they're probably creating payment tokens using Over-the-air (OTA) provisioning.

upvoted 0 times

...

Vince

10 months ago

User 2: That sounds like Secure Element (SE) provisioning to me.

upvoted 0 times

...

Devora

10 months ago

User 1: I think the vendor is actually using virtual secure elements in their data center.

upvoted 0 times

...

Kimi

11 months ago

I'm pretty confident that the answer is B) Host Card Emulation (HCE) provisioning. The vendor is hosting the secure elements and sending payment tokens to the mobile device, which is the essence of HCE.

upvoted 0 times

...

Jenelle

11 months ago

Ah, this is a classic payment technology question! I'm going to go with B) Host Card Emulation (HCE) provisioning. It just sounds like the most logical answer based on the information provided.

upvoted 0 times

...

Carma

11 months ago

Hmm, this is a tricky one. I'm not entirely sure, but I'm leaning towards C) Secure Element (SE) provisioning. The vendor seems to be managing the secure elements, but I'm not familiar with the details of how that works.

upvoted 0 times

Glendora

9 months ago

A: That could make sense too, it's a tough choice.

upvoted 0 times

...

Stevie

9 months ago

C: Maybe it's D) Over-the-air (OTA) provisioning since the token is sent to the cardholder's mobile device.

upvoted 0 times

...

Lashon

9 months ago

B: I agree, it sounds like the vendor is managing the secure elements.

upvoted 0 times

...

Earleen

9 months ago

A: I think it might be C) Secure Element (SE) provisioning.

upvoted 0 times

...

Ezekiel

9 months ago

I agree with you, I also think it's C) Secure Element (SE) provisioning.

upvoted 0 times

...

Norah

10 months ago

I'm not sure, but I think it could be A) Card personalization.

upvoted 0 times

...

Leah

10 months ago

I believe it's D) Over-the-air (OTA) provisioning.

upvoted 0 times

...

Wade

10 months ago

I think it might be C) Secure Element (SE) provisioning.

upvoted 0 times

...

Olene

11 months ago

This question seems to be testing my knowledge of mobile payment technologies. I think the answer is B) Host Card Emulation (HCE) provisioning, as the vendor is hosting virtual secure elements and creating payment tokens for the cardholder's mobile device.

upvoted 0 times