CSL Cybersecurity Regulations & Compliance 3

Question 1

Under the California Consumer Privacy Act (CCPA), which right allows consumers to request that a business delete their personal information?

Accepted Answer

Right to Delete

Answer

The Right to Delete under CCPA allows consumers to request that businesses delete personal information collected about them, subject to certain exceptions.

Question 2

Which NIST Special Publication provides guidelines for security categorization of federal information and information systems?

Accepted Answer

NIST SP 800-60

Answer

NIST SP 800-60 provides guidance for mapping information and information system types to security categories (Low, Moderate, High) as required by FIPS 199.

Question 3

The New York SHIELD Act expanded upon which existing state law to add data security program requirements for businesses handling New Yorkers' private information?

Accepted Answer

New York Information Security Breach and Notification Act

Answer

The SHIELD Act amended New York's existing breach notification law to also require businesses to implement reasonable data security programs.

Question 4

Under SOC 2, which Trust Service Criteria category covers policies and procedures that management uses to oversee the design, implementation, and operation of controls?

Accepted Answer

Common Criteria (CC) — Control Environment

Answer

The Common Criteria section CC1 (Control Environment) in SOC 2 addresses management's oversight structure, including governance, policies, and organizational culture.

Question 5

Which agency enforces the Children's Online Privacy Protection Act (COPPA) in the United States?

Accepted Answer

Federal Trade Commission

Answer

The FTC is the primary enforcement agency for COPPA, which protects the online privacy of children under 13.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL Cybersecurity Regulations & Compliance 3