Industry Regulations & Compliance Flashcards
7 cards from real ACT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Industry Regulations & Compliance flashcards as text
Under FERPA, which entity has primary responsibility for protecting student education records at a K-12 school using Apple devices?
Answer: The educational institution
FERPA places responsibility on the educational institution to safeguard student education records, regardless of the technology platform used.
An Apple Certified Trainer is deploying iPads in a healthcare clinic. Which regulation primarily governs the protection of patient health information on those devices?
Answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) governs the protection of protected health information (PHI) in US healthcare settings.
A trainer is setting up Apple School Manager for a district. Which MDM configuration helps enforce CIPA compliance for student internet access?
Answer: Configuring content filtering restrictions via MDM profile
CIPA requires schools to implement internet filtering, which can be enforced through MDM content restriction profiles in Apple School Manager.
Which Apple platform feature allows an organization to enforce a passcode policy to meet SOC 2 compliance requirements?
Answer: MDM configuration profile with passcode payload
MDM configuration profiles with a passcode payload enforce minimum passcode length, complexity, and expiration across managed devices to satisfy SOC 2 controls.
When deploying Macs in a US federal agency, which security framework do Apple devices need to align with for government use?
Answer: NIST SP 800-53 / FedRAMP
US federal agencies use NIST SP 800-53 controls and FedRAMP authorization as the standard security framework for IT systems including Apple devices.
A company collects biometric data via an iOS app for employee authentication. Which US state law most directly regulates the collection of biometric identifiers?
Answer: Illinois Biometric Information Privacy Act (BIPA)
Illinois BIPA specifically regulates the collection, storage, and use of biometric identifiers such as fingerprints and facial geometry.
What is the primary purpose of Apple's 'Activation Lock' feature in the context of regulatory compliance for device asset management?
Answer: It prevents unauthorized reactivation, supporting chain-of-custody and theft-deterrence compliance requirements
Activation Lock ties the device to an Apple ID, preventing unauthorized reuse and supporting asset tracking and loss-prevention compliance obligations.