Cyber Security Jobs Security Compliance and Regulations

Question 1

Which US regulation requires healthcare organizations to protect patient health information (PHI)?

Accepted Answer

HIPAA

Answer

PCI DSS

Answer

GDPR

Answer

SOX

Question 2

What does PCI DSS govern?

Accepted Answer

Security standards for organizations that process credit card payments

Answer

Environmental regulations for data centers

Answer

US export controls for encryption software

Answer

Rules for government contractor cybersecurity

Question 3

Which US federal law requires publicly traded companies to maintain accurate financial records and internal controls, including IT controls?

Accepted Answer

SOX (Sarbanes-Oxley Act)

Answer

HIPAA

Answer

FISMA

Answer

COPPA

Question 4

What is a security audit?

Accepted Answer

A systematic evaluation of an organization's security posture against a defined standard

Answer

An automated malware scan

Answer

A penetration test that uses real exploits

Answer

A real-time network traffic analysis

Question 5

What does FISMA require of US federal agencies?

Accepted Answer

Develop, document, and implement agency-wide information security programs

Answer

Report quarterly earnings to shareholders

Answer

Encrypt all outbound email

Answer

Conduct annual penetration tests on all systems

Question 6

Which framework is most commonly used by US organizations to structure their cybersecurity programs?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

ITIL Service Management

Answer

ISO 14001 Environmental

Answer

Six Sigma DMAIC