- All Exams Instant Download
Which procedure should be employed to identify the types and locations of data held by Wesley Energy?
SCENARIO Wesley Energy has finally made its move, acquiring the venerable oil and gas exploration firm Lancelot from its long-time owner David Wilson. As a member of the transition team, you have come to realize that Wilson's quirky nature affected even Lancelot's data practices, which are maddeningly inconsistent. `The old...
Which is the preferred response?
A vendor has been collecting data under an old contract, not aligned with the practices of the organization. Which is the preferred response?A . Destroy the dataB . Update the contract to bring the vendor into alignment.C . Continue the terms of the existing contract until it expires.D . Terminate...
Ted's implementation is most likely a response to what incident?
SCENARIO Kyle is a new security compliance manager who will be responsible for coordinating and executing controls to ensure compliance with the company's information security policy and industry standards. Kyle is also new to the company, where collaboration is a core value. On his first day of new-hire orientation, Kyle's...
What can be used to determine the type of data in storage without exposing its contents?
What can be used to determine the type of data in storage without exposing its contents?A . Collection records.B . Data mapping.C . Server logs.D . Metadata.View AnswerAnswer: D
A credit card with the last few numbers visible is an example of what?
A credit card with the last few numbers visible is an example of what?A . Masking dataB . Synthetic dataC . Sighting controls.D . Partial encryptionView AnswerAnswer: A
Carol replied, “Jane, that doesn’t sound so bad. Could you just fix things and help us to post even more online?
SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it...
After committing to a Privacy by Design program, which activity should take place first?
After committing to a Privacy by Design program, which activity should take place first?A . Create a privacy standard that applies to all projects and services.B . Establish a retention policy for all data being collected.C . Implement easy to use privacy settings for users.D . Perform privacy reviews on...
What is a mistake organizations make when establishing privacy settings during the development of applications?
What is a mistake organizations make when establishing privacy settings during the development of applications?A . Providing a user with too many choices.B . Failing to use "Do Not Track” technology.C . Providing a user with too much third-party information.D . Failing to get explicit consent from a user on...
Which of the following datasets derived from that data would be considered the most de-identified?
Aadhaar is a unique-identity number of 12 digits issued to all Indian residents based on their biometric and demographic data. The data is collected by the Unique Identification Authority of India. The Aadhaar database contains the Aadhaar number, name, date of birth, gender and address of over 1 billion individuals....
What would be an example of an organization transferring the risks associated with a data breach?
What would be an example of an organization transferring the risks associated with a data breach?A . Using a third-party service to process credit card transactions.B . Encrypting sensitive personal data during collection and storageC . Purchasing insurance to cover the organization in case of a breach.D . Applying industry...
