Data Privacy and Security Flashcards
7 cards from real General practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Privacy and Security flashcards as text
What is a 'data breach notification' requirement?
Answer: A legal requirement to notify affected individuals and/or authorities when personal data is compromised
Data breach notification laws require organizations to inform affected individuals and relevant regulatory authorities within a specified timeframe when personal data has been unlawfully accessed or disclosed.
What does 'end-to-end encryption' mean?
Answer: Encrypting data so only the communicating parties can read it, preventing access by intermediaries
End-to-end encryption ensures that data is encrypted on the sender's side and can only be decrypted by the intended recipient, making it unreadable to service providers or interceptors.
Which of the following is an example of 'personally identifiable information' (PII)?
Answer: A user's Social Security number
PII is any information that can be used to identify a specific individual; a Social Security number is a direct identifier and a classic example of PII.
What is the California Consumer Privacy Act (CCPA) primarily designed to do?
Answer: Give California residents rights over the personal data businesses collect about them
The CCPA grants California residents rights to know, delete, and opt out of the sale of their personal information collected by businesses.
What is 'vishing'?
Answer: Voice-based phishing where attackers call victims to extract sensitive information
Vishing (voice phishing) is a social engineering attack where fraudsters use phone calls to impersonate legitimate organizations and trick victims into revealing sensitive information.
What does 'secure by design' mean in software development?
Answer: Building security considerations and controls into a product from the very beginning of development
Secure by design means that security is integrated into every phase of the software development lifecycle rather than added as an afterthought.
What is the purpose of a 'Virtual Private Network' (VPN)?
Answer: To create an encrypted tunnel for secure data transmission over a public network
A VPN encrypts internet traffic and routes it through a secure server, protecting data from interception and masking the user's IP address when using public networks.