Practice Test GeeksCISSP - Certified Information Systems Security Professional Practice Test
← All CISSP Flashcard Decks

CISSP Legal and Compliance Flashcards

6 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CISSP Legal and Compliance flashcards as text

  1. What is the legal significance of a 'chain of custody' in digital forensics?

    Answer: It documents the unbroken possession and handling of evidence to maintain its admissibility in court

    Chain of custody creates a documented trail proving evidence integrity and proper handling, which is essential for admissibility in legal proceedings.

  2. Under the Computer Fraud and Abuse Act (CFAA), what element is typically required to establish unauthorized access?

    Answer: Access to a protected computer without authorization or exceeding authorized access

    The CFAA criminalizes accessing a protected computer without authorization or in a way that exceeds authorized access, regardless of intent.

  3. What does 'safe harbor' mean in the context of US-EU data transfers before Privacy Shield was invalidated?

    Answer: A self-certification framework allowing US companies to transfer EU personal data by agreeing to privacy principles

    Safe Harbor was a self-certification program enabling US organizations to receive EU personal data by committing to FTC-enforced privacy standards.

  4. Which type of law in the US allows private citizens to sue for damages when their legal rights are violated?

    Answer: Civil law (tort law)

    Civil (tort) law enables individuals to seek monetary damages for harm caused by another party's negligence or wrongful acts.

  5. What compliance framework is mandatory for organizations that process payment card data?

    Answer: PCI DSS

    The Payment Card Industry Data Security Standard (PCI DSS) is contractually required by card brands for any entity storing, processing, or transmitting cardholder data.

  6. What is the purpose of a non-disclosure agreement (NDA) in information security?

    Answer: To legally bind parties to keep sensitive information confidential and restrict its disclosure

    An NDA creates a legal obligation of confidentiality, protecting trade secrets and sensitive data shared between parties in a business relationship.