Cognizant Industry Regulations 2

Question 1

Under HIPAA, what is the maximum civil penalty per violation category per calendar year?

Accepted Answer

$1,900,000

Answer

HIPAA civil penalties are capped at $1,919,173 per violation category per calendar year (adjusted for inflation).

Question 2

Which regulation specifically governs the export of U.S. dual-use technology and software that IT companies like Cognizant must comply with?

Accepted Answer

EAR

Answer

The Export Administration Regulations (EAR) govern dual-use items — commercial goods with potential military applications — that IT services firms must comply with.

Question 3

Which PCI DSS requirement mandates that organizations maintain a vulnerability management program?

Accepted Answer

Requirement 6

Answer

PCI DSS Requirement 6 requires organizations to develop and maintain secure systems and software as part of vulnerability management.

Question 4

The EU-U.S. Data Privacy Framework replaced which prior agreement invalidated by the Court of Justice of the EU?

Accepted Answer

Privacy Shield

Answer

The EU-U.S. Data Privacy Framework replaced Privacy Shield, which was invalidated by the Schrems II ruling in 2020.

Question 5

Under the Sarbanes-Oxley Act, Section 404 requires management to assess the effectiveness of which type of controls?

Accepted Answer

Internal controls over financial reporting

Answer

SOX Section 404 requires management and external auditors to report on the adequacy of internal controls over financial reporting (ICFR).

(Cognizant) Cognizant Test Practice Test

(Cognizant) Cognizant Test Practice Test

Cognizant Industry Regulations 2