CIPA Data Security & Privacy Compliance 2

Question 1

Under HIPAA's Security Rule, which of the following is classified as an 'administrative safeguard'?

Accepted Answer

Workforce training and security awareness programs

Answer

HIPAA's Security Rule categorizes workforce training and security awareness programs as administrative safeguards, distinct from physical or technical safeguards.

Question 2

A company collects consumer data in California. Under CCPA, what right allows consumers to prevent a business from selling their personal information?

Accepted Answer

Right to opt-out

Answer

The CCPA grants California consumers the right to opt-out of the sale of their personal information to third parties.

Question 3

Which data classification level typically requires the strictest access controls and encryption standards?

Accepted Answer

Top Secret / Restricted

Answer

Top Secret or Restricted data requires the strictest controls because unauthorized disclosure could cause severe harm to the organization or individuals.

Question 4

A penetration tester discovers that an organization stores Social Security Numbers in plaintext in a database. Which control would most directly remediate this risk?

Accepted Answer

Applying data-at-rest encryption to the database

Answer

Encrypting data at rest ensures that SSNs are unreadable even if an attacker gains direct access to the database files.

Question 5

Under GDPR, the 'right to be forgotten' is formally known as which right?

Accepted Answer

Right to erasure

Answer

GDPR Article 17 codifies the 'right to be forgotten' as the right to erasure, allowing individuals to request deletion of their personal data.

(CIPA) Certified Identity Protection Advisor Practice Test

(CIPA) Certified Identity Protection Advisor Practice Test

CIPA Data Security & Privacy Compliance 2