Cyber Security Jobs Security Compliance and Regulations 2

Question 1

What is the purpose of a risk assessment in a compliance program?

Accepted Answer

Identify, analyze, and prioritize risks to determine appropriate security controls

Answer

Risk assessments identify potential threats, analyze their likelihood and impact, and help organizations prioritize which controls to implement first.

Question 2

Under GDPR, even though it is a European law, which US companies must comply with it?

Accepted Answer

Any US company that processes personal data of EU residents

Answer

GDPR applies to any organization worldwide that processes personal data of EU residents, regardless of where the company is headquartered.

Question 3

What is a SOC 2 report used for?

Accepted Answer

Demonstrating that a service provider's controls meet trust service criteria for security, availability, and confidentiality

Answer

SOC 2 reports (developed by AICPA) assess and attest to a service organization's controls related to security, availability, processing integrity, confidentiality, and privacy.

Question 4

What does 'least privilege' mean as a compliance and security principle?

Accepted Answer

Users and systems should have only the minimum access needed to perform their role

Answer

The principle of least privilege limits user and system permissions to the bare minimum required for their function, reducing the blast radius of any compromise.

Question 5

What is a DPA (Data Processing Agreement) and when is it required?

Accepted Answer

A contract between a data controller and processor outlining GDPR-compliant data handling obligations

Answer

A DPA is a legally binding contract required under GDPR between organizations and their third-party data processors to ensure compliant data handling.

Cyber Security Jobs Practice Test

Cyber Security Jobs Practice Test

Cyber Security Jobs Security Compliance and Regulations 2