Cyber Security Jobs Organizational Cyber Security 4

Question 1

Which US regulation governs the protection of patient health information?

Accepted Answer

HIPAA

Answer

HIPAA sets requirements for safeguarding protected health information.

Question 2

PCI DSS compliance is required for organizations that:

Accepted Answer

Handle payment card data

Answer

PCI DSS applies to any organization that stores, processes, or transmits cardholder data.

Question 3

A vendor will process your customer data. What document defines their security obligations?

Accepted Answer

Data Processing Agreement / contract with security clauses

Answer

A data processing agreement contractually binds third parties to required security obligations.

Question 4

What is the main goal of a third-party (vendor) risk management program?

Accepted Answer

Assess and reduce risk introduced by suppliers and partners

Answer

Vendor risk management evaluates and mitigates security risks from external suppliers.

Question 5

An organization conducts a tabletop exercise. What does this accomplish?

Accepted Answer

Tests incident response plans through a discussion-based scenario

Answer

A tabletop exercise walks teams through a simulated incident to test response readiness.

Cyber Security Jobs Practice Test