Cyber Security Jobs Organizational Cyber Security 4

Question 1

Which US regulation governs the protection of patient health information?

Accepted Answer

HIPAA

Answer

SOX

Answer

FERPA

Answer

CAN-SPAM

Question 2

PCI DSS compliance is required for organizations that:

Accepted Answer

Handle payment card data

Answer

Operate public schools

Answer

Manage federal tax records

Answer

Run electric utilities

Question 3

A vendor will process your customer data. What document defines their security obligations?

Accepted Answer

Data Processing Agreement / contract with security clauses

Answer

Marketing brochure

Answer

Public press release

Answer

Employee handbook

Question 4

What is the main goal of a third-party (vendor) risk management program?

Accepted Answer

Assess and reduce risk introduced by suppliers and partners

Answer

Increase advertising reach

Answer

Lower the company tax rate

Answer

Improve product packaging

Question 5

An organization conducts a tabletop exercise. What does this accomplish?

Accepted Answer

Tests incident response plans through a discussion-based scenario

Answer

Physically rebuilds a data center

Answer

Replaces all employee laptops

Answer

Audits payroll records

Question 6

Which document records identified risks, their severity, and treatment decisions?

Accepted Answer

Risk register

Answer

Change log

Answer

Asset invoice

Answer

Marketing plan

Question 7

Why are regular internal security audits important for an organization?

Accepted Answer

They verify controls are working and find gaps before attackers do

Answer

They increase sales revenue directly

Answer

They eliminate the need for backups

Answer

They replace the legal department