General Data Privacy and Security 5

Question 1

What is a 'data breach notification' requirement?

Accepted Answer

A legal requirement to notify affected individuals and/or authorities when personal data is compromised

Answer

Data breach notification laws require organizations to inform affected individuals and relevant regulatory authorities within a specified timeframe when personal data has been unlawfully accessed or disclosed.

Question 2

What does 'end-to-end encryption' mean?

Accepted Answer

Encrypting data so only the communicating parties can read it, preventing access by intermediaries

Answer

End-to-end encryption ensures that data is encrypted on the sender's side and can only be decrypted by the intended recipient, making it unreadable to service providers or interceptors.

Question 3

Which of the following is an example of 'personally identifiable information' (PII)?

Accepted Answer

A user's Social Security number

Answer

PII is any information that can be used to identify a specific individual; a Social Security number is a direct identifier and a classic example of PII.

Question 4

What is the California Consumer Privacy Act (CCPA) primarily designed to do?

Accepted Answer

Give California residents rights over the personal data businesses collect about them

Answer

The CCPA grants California residents rights to know, delete, and opt out of the sale of their personal information collected by businesses.

Question 5

What is 'vishing'?

Accepted Answer

Voice-based phishing where attackers call victims to extract sensitive information

Answer

Vishing (voice phishing) is a social engineering attack where fraudsters use phone calls to impersonate legitimate organizations and trick victims into revealing sensitive information.

General Practice Test

General Practice Test

General Data Privacy and Security 5