Everfi Everfi Data Privacy and Cybersecurity 2 — Questions and Answers
Question 1: EverFi's data privacy content explains that FERPA primarily protects the privacy of:
- Medical records of adults
- Educational records of students (Correct answer)
- Corporate financial data
- Government classified documents
Correct answer: Educational records of students
FERPA (Family Educational Rights and Privacy Act) is a US federal law that protects the privacy of student educational records.
Question 2: In EverFi cybersecurity training, what does 'social engineering' refer to?
- Building social media platforms
- Manipulating people psychologically to gain unauthorized access to information or systems (Correct answer)
- Designing user interfaces
- Engineering social media algorithms
Correct answer: Manipulating people psychologically to gain unauthorized access to information or systems
Social engineering involves psychologically manipulating individuals into divulging confidential information or performing actions that compromise security.
Question 3: According to EverFi, what is the 'principle of least privilege' in data security?
- Giving all employees full system access
- Granting users only the minimum access permissions necessary to perform their job (Correct answer)
- Limiting internet access to executives only
- Removing passwords from low-risk accounts
Correct answer: Granting users only the minimum access permissions necessary to perform their job
The principle of least privilege limits each user's access rights to only what is necessary for their specific role, reducing the risk of data breaches.
Question 4: EverFi trains employees that when using public Wi-Fi, they should:
- Access all work systems freely
- Avoid transmitting sensitive data or use a VPN to encrypt the connection (Correct answer)
- Turn off their firewall for faster speeds
- Share their connection with others nearby
Correct answer: Avoid transmitting sensitive data or use a VPN to encrypt the connection
Public Wi-Fi networks are unsecured, so employees should avoid transmitting sensitive data or use a VPN to encrypt their communications.
Question 5: What does EverFi explain about 'data minimization' as a privacy principle?
- Storing as much data as possible for future use
- Collecting and retaining only the data that is necessary for a specific purpose (Correct answer)
- Deleting all data immediately after use
- Sharing all collected data with third parties
Correct answer: Collecting and retaining only the data that is necessary for a specific purpose
Data minimization is the practice of collecting and storing only the data that is strictly necessary for a defined purpose, reducing privacy risk.
Question 6: In EverFi's cybersecurity training, what is an 'insider threat'?
- A hacker attacking from overseas
- A security risk posed by individuals within an organization such as employees or contractors (Correct answer)
- Malware installed from an external website
- A physical break-in at a data center
Correct answer: A security risk posed by individuals within an organization such as employees or contractors
An insider threat is a security risk that originates from within the organization, such as an employee, contractor, or partner who misuses their authorized access.
Everfi Everfi Data Privacy and Cybersecurity 2
EverFi's data privacy content explains that FERPA primarily protects the privacy of: