ACE Industry Regulations & Compliance 3

Question 1

The Sarbanes-Oxley Act (SOX) Section 802 makes it a federal crime to destroy, alter, or falsify records in what context?

Accepted Answer

Federal investigations and bankruptcy proceedings

Answer

Any business record regardless of litigation

Answer

Only SEC-regulated company filings

Answer

Records related to healthcare billing

Question 2

When a forensic examiner works on a case involving a publicly traded company, which obligation does SOX impose regarding electronic records retention?

Accepted Answer

Audit work papers must be retained for 7 years

Answer

All records must be kept for 3 years

Answer

Financial records must be retained for 10 years

Answer

Email must be preserved for 5 years

Question 3

Under the Federal Rules of Civil Procedure (FRCP) Rule 37(e), what sanction may a court impose if a party fails to preserve electronically stored information (ESI) due to a failure to take reasonable steps?

Accepted Answer

Adverse inference instructions to the jury

Answer

Automatic dismissal of the case

Answer

Criminal contempt charges

Answer

Mandatory third-party forensic audit

Question 4

Which NIST publication provides the primary framework for computer security incident handling and is commonly referenced in forensic compliance procedures?

Accepted Answer

NIST SP 800-61

Answer

NIST SP 800-53

Answer

NIST SP 800-137

Answer

NIST SP 800-92

Question 5

A forensic investigator is examining a healthcare organization's systems. Under HIPAA's Security Rule, which category of safeguards requires workforce training and security policies?

Accepted Answer

Administrative safeguards

Answer

Physical safeguards

Answer

Technical safeguards

Answer

Operational safeguards

Question 6

What is the primary legal concern when a forensic examiner acquires a forensic image of an employee's personal smartphone that was used for both business and personal purposes?

Accepted Answer

Fourth Amendment and employee privacy rights under state law

Answer

Violation of PCI DSS storage requirements

Answer

OSHA workplace safety regulations

Answer

Violation of the Wiretap Act only

Question 7

The Gramm-Leach-Bliley Act (GLBA) Safeguards Rule requires financial institutions to implement a comprehensive information security program primarily to protect what type of information?

Accepted Answer

Nonpublic personal information (NPI) of customers

Answer

Employee payroll records

Answer

Publicly disclosed financial statements

Answer

Interbank transaction logs