CCISO Legal and Regulatory 2

Question 1

Under the EU General Data Protection Regulation (GDPR), what is the maximum fine for the most serious violations?

Accepted Answer

€20 million or 4% of global annual turnover

Answer

GDPR's most serious violations can result in fines up to €20 million or 4% of global annual turnover, whichever is higher.

Question 2

Which US federal law specifically governs the privacy of student education records and limits disclosure without consent?

Accepted Answer

FERPA

Answer

FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records held by federally funded institutions.

Question 3

A CISO discovers that a vendor processes personal data on behalf of the company without a signed Data Processing Agreement. Which GDPR role distinction is most relevant?

Accepted Answer

Data controller vs. data processor

Answer

GDPR requires a written Data Processing Agreement between a data controller and any data processor handling personal data on its behalf.

Question 4

Which principle under the GDPR requires that personal data be kept only as long as necessary for its stated purpose?

Accepted Answer

Storage limitation

Answer

The storage limitation principle mandates that personal data not be retained longer than necessary for the purpose for which it was collected.

Question 5

An organization operating in California must comply with CCPA. Which right does CCPA grant to consumers regarding personal information held by businesses?

Accepted Answer

Right to know, delete, and opt-out of sale

Answer

CCPA grants California consumers the right to know what personal information is collected, the right to delete it, and the right to opt-out of its sale.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Legal and Regulatory 2