Cyber Security Jobs Security Compliance and Regulations 1

Question 1

Which US regulation requires healthcare organizations to protect patient health information (PHI)?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) mandates security and privacy protections for Protected Health Information in the US healthcare sector.

Question 2

What does PCI DSS govern?

Accepted Answer

Security standards for organizations that process credit card payments

Answer

PCI DSS (Payment Card Industry Data Security Standard) sets security requirements for any organization that stores, processes, or transmits cardholder data.

Question 3

Which US federal law requires publicly traded companies to maintain accurate financial records and internal controls, including IT controls?

Accepted Answer

SOX (Sarbanes-Oxley Act)

Answer

SOX (Sarbanes-Oxley Act) requires public companies to implement and audit internal controls over financial reporting, including IT system controls.

Question 4

What is a security audit?

Accepted Answer

A systematic evaluation of an organization's security posture against a defined standard

Answer

A security audit formally assesses an organization's policies, procedures, and controls against a standard (like ISO 27001 or NIST) to identify gaps.

Question 5

What does FISMA require of US federal agencies?

Accepted Answer

Develop, document, and implement agency-wide information security programs

Answer

FISMA (Federal Information Security Management Act) requires US federal agencies to implement comprehensive information security programs and report annually to OMB.

Cyber Security Jobs Practice Test

Cyber Security Jobs Practice Test

Cyber Security Jobs Security Compliance and Regulations 1