ACE Industry Regulations & Compliance 2

Question 1

Under HIPAA, what is the maximum civil penalty per violation category when the covered entity demonstrates willful neglect and fails to correct the violation?

Accepted Answer

$1,900,000

Answer

$10,000

Answer

$50,000

Answer

$1,000,000

Question 2

Which U.S. federal law specifically governs the interception of electronic communications and sets standards for lawful access to stored electronic data?

Accepted Answer

Electronic Communications Privacy Act (ECPA)

Answer

Privacy Act of 1974

Answer

Computer Fraud and Abuse Act (CFAA)

Answer

Freedom of Information Act (FOIA)

Question 3

A forensic examiner discovers evidence on a corporate server that may relate to insider trading. Which regulatory body's guidelines would most directly govern the handling and reporting of this financial evidence?

Accepted Answer

SEC

Answer

FINRA

Answer

FDIC

Answer

OCC

Question 4

What does the 'chain of custody' requirement primarily ensure under Federal Rules of Evidence (FRE) Rule 901?

Accepted Answer

Evidence can be authenticated as what it is claimed to be

Answer

Evidence is encrypted during transport

Answer

Evidence is stored in a FIPS-compliant manner

Answer

Evidence is backed up to a certified laboratory

Question 5

Under GDPR, when conducting digital forensic investigations involving EU citizens' data, what is the maximum fine for serious violations?

Accepted Answer

€20 million or 4% of global annual turnover

Answer

€10 million or 2% of global annual turnover

Answer

€50 million or 5% of global annual turnover

Answer

€100 million or 10% of global annual turnover

Question 6

Which standard framework provides a set of controls specifically designed for protecting cardholder data in payment systems, directly relevant when examining retail point-of-sale breaches?

Accepted Answer

PCI DSS

Answer

ISO 27001

Answer

NIST SP 800-53

Answer

SOX

Question 7

In a U.S. federal investigation, what legal authority does a forensic examiner need to search and seize digital evidence from a third-party cloud provider?

Accepted Answer

A search warrant or court order under 18 U.S.C. § 2703

Answer

A civil subpoena

Answer

Written consent from the account holder only

Answer

A National Security Letter