Nama : Sultan Chairul

Nim : 2581484737

1. What is the primary goal of PCI DSS?

Answer :
The primary goal of PCI DSS (Payment Card Industry Data Security Standard) is to protect payment card information from theft, fraud, and unauthorized access. PCI DSS provides security standards that organizations must follow when processing, storing, or transmitting cardholder data. Its purpose is to improve payment security and reduce the risk of data breaches.

2. How does an SSL/TLS certificate help secure an e-commerce transaction? How can a user verify a site has one?

Answer :
An SSL/TLS certificate secures e-commerce transactions by encrypting the data exchanged between the user’s browser and the website. This prevents attackers from intercepting sensitive information such as passwords, credit card numbers, and personal details. SSL/TLS also helps confirm that the website is authentic and trustworthy. Users can verify that a site has an SSL/TLS certificate by checking for “https://” in the website address and looking for a padlock icon in the browser’s address bar.

3. Why is it generally more secure for a small digital business to use a trusted payment gateway instead of processing and storing credit card details itself?

Answer :
It is generally more secure because trusted payment gateways already use advanced security systems and comply with standards such as PCI DSS. They provide encryption, fraud detection, and secure payment processing to protect customer information. If a small business stores and processes credit card details itself, it becomes responsible for maintaining complex security systems, which can be expensive and difficult to manage. Using a trusted payment gateway reduces the risk of data breaches and helps businesses operate more safely.

Keterangan : 100%

Bukti : Sudah mengerjakan tugas dengan baik dan benar.