Data Privacy and Security Flashcards
7 cards from real General practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Privacy and Security flashcards as text
What is 'data anonymization'?
Answer: Removing or altering information so individuals can no longer be identified
Data anonymization is the process of transforming personal data so that the individual cannot be identified, either directly or indirectly.
Which type of malware disguises itself as legitimate software to trick users into installing it?
Answer: Trojan horse
A Trojan horse is malware that appears to be legitimate software but contains hidden malicious code that executes once installed.
What does 'the right to be forgotten' (erasure) allow individuals to do under GDPR?
Answer: Ask organizations to delete their personal data under certain conditions
Under GDPR, the right to erasure (right to be forgotten) allows individuals to request deletion of their personal data when it is no longer necessary or when consent is withdrawn.
What is 'spear phishing'?
Answer: A targeted phishing attack directed at a specific individual or organization
Spear phishing is a highly targeted form of phishing that uses personalized information about a specific victim to make the fraudulent message appear more credible.
What is 'patch management' in the context of cybersecurity?
Answer: The process of regularly applying updates to fix vulnerabilities in software
Patch management is the practice of identifying, acquiring, testing, and applying software updates to close security vulnerabilities before they can be exploited.
What is 'pseudonymization' as defined under GDPR?
Answer: Replacing identifying information with artificial identifiers while keeping data useful
Pseudonymization replaces directly identifying data with a pseudonym (an artificial identifier), but re-identification is still possible with additional information kept separately.
Which security concept describes the practice of granting users only the permissions they need to perform their job?
Answer: Principle of least privilege
The principle of least privilege limits user access rights to only what is necessary for their role, reducing the risk of accidental or malicious misuse.