CISSP CISSP Legal and Compliance

Question 1

Which US federal law established privacy rights and restrictions on the collection of personal data by federal agencies?

Accepted Answer

The Privacy Act of 1974

Answer

HIPAA

Answer

GLBA

Answer

FERPA

Question 2

Under HIPAA, what term describes organizations that handle protected health information on behalf of a covered entity?

Accepted Answer

Business associate

Answer

Data processor

Answer

Sub-contractor

Answer

Data custodian

Question 3

What is the primary goal of the Gramm-Leach-Bliley Act (GLBA) in the context of information security?

Accepted Answer

To protect the personal financial information of consumers held by financial institutions

Answer

To regulate healthcare data privacy

Answer

To establish cybersecurity standards for critical infrastructure

Answer

To mandate breach notification for all US businesses

Question 4

Which legal concept determines which country's laws apply when a crime involves actors or systems in multiple jurisdictions?

Accepted Answer

Jurisdiction

Answer

Data sovereignty

Answer

Choice of law

Answer

Extradition

Question 5

What type of law in the US covers crimes committed against computer systems or using computer systems?

Accepted Answer

Computer crime law (e.g., CFAA)

Answer

Administrative law

Answer

Civil law

Answer

Contract law

Question 6

Which principle requires organizations to retain data only as long as necessary for its intended purpose?

Accepted Answer

Data minimization

Answer

Data retention

Answer

Data classification

Answer

Data portability