General Data Privacy and Security 2

Question 1

What does the term 'data minimization' mean in the context of privacy?

Accepted Answer

Collecting only the data necessary for a specific purpose

Answer

Compressing data to save storage space

Answer

Deleting all data after 30 days

Answer

Encrypting data before transmission

Question 2

Which attack type involves an attacker intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-middle (MITM) attack

Answer

SQL injection

Answer

Denial-of-service attack

Answer

Cross-site scripting

Question 3

What is a 'privacy impact assessment' (PIA)?

Accepted Answer

A process for identifying and mitigating privacy risks before launching a project

Answer

A penalty issued for GDPR violations

Answer

A user survey about data preferences

Answer

A type of firewall configuration review

Question 4

Which of the following best describes 'two-factor authentication' (2FA)?

Accepted Answer

Requiring two separate forms of identity verification to access an account

Answer

Using two different passwords for one account

Answer

Logging in from two devices simultaneously

Answer

Encrypting data with two different keys

Question 5

Under the Children's Online Privacy Protection Act (COPPA), what age threshold requires parental consent for data collection?

Accepted Answer

Under 13

Answer

Under 16

Answer

Under 18

Answer

Under 12

Question 6

What is 'shoulder surfing' in the context of data security?

Accepted Answer

Physically observing someone's screen or keyboard to steal information

Answer

Hacking through a shared Wi-Fi network

Answer

Using someone's digital footprint to track their activity

Answer

Installing spyware on a device covertly

Question 7

What does 'data portability' allow individuals to do?

Accepted Answer

Receive and transfer their personal data to another service provider

Answer

Move their physical devices across borders without data loss

Answer

Access other users' anonymized data

Answer

Store their data on multiple cloud servers simultaneously