General Data Privacy and Security 2

Question 1

What does the term 'data minimization' mean in the context of privacy?

Accepted Answer

Collecting only the data necessary for a specific purpose

Answer

Data minimization is a privacy principle requiring organizations to collect only the minimum personal data needed to fulfill a stated purpose.

Question 2

Which attack type involves an attacker intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-middle (MITM) attack

Answer

A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters communications between two parties who believe they are communicating directly.

Question 3

What is a 'privacy impact assessment' (PIA)?

Accepted Answer

A process for identifying and mitigating privacy risks before launching a project

Answer

A Privacy Impact Assessment (PIA) is a process organizations use to identify, evaluate, and mitigate privacy risks associated with new projects or data processing activities.

Question 4

Which of the following best describes 'two-factor authentication' (2FA)?

Accepted Answer

Requiring two separate forms of identity verification to access an account

Answer

Two-factor authentication requires users to provide two distinct types of credentials—such as a password and a one-time code—to verify their identity.

Question 5

Under the Children's Online Privacy Protection Act (COPPA), what age threshold requires parental consent for data collection?

Accepted Answer

Under 13

Answer

COPPA requires websites and online services to obtain verifiable parental consent before collecting personal information from children under 13.

General Practice Test

General Practice Test

General Data Privacy and Security 2