Microsoft Windows 98 Regulatory Frameworks & Compliance 5

Question 1

The Gramm-Leach-Bliley Act (GLBA), enacted in 1999 and relevant to late Windows 98 deployments, required financial institutions to do what regarding customer data stored on Windows 98 systems?

Accepted Answer

Implement safeguards to protect the security and confidentiality of customer financial information

Answer

GLBA's Safeguards Rule required financial institutions to develop security programs protecting customer financial information, affecting how Windows 98 systems storing such data were configured.

Question 2

Under the Federal Trade Commission Act, misleading consumers about software privacy practices (e.g., falsely claiming Windows 98 didn't collect user data) would be investigated as:

Accepted Answer

An unfair or deceptive act or practice under Section 5 of the FTC Act

Answer

The FTC's Section 5 authority over unfair or deceptive practices covered software makers who made false privacy claims to consumers.

Question 3

The EU's Safe Harbor framework (2000), which followed the Windows 98 era, addressed what compliance challenge for U.S. companies transferring EU citizens' data processed on Windows 98 systems?

Accepted Answer

Providing an adequate level of data protection to satisfy the EU Data Protection Directive

Answer

Safe Harbor allowed U.S. companies to self-certify adequate protection for EU personal data, bridging the gap between U.S. practices and the EU's strict Data Protection Directive.

Question 4

Which software licensing model, common in the Windows 98 era, granted organizations the right to install Windows 98 on a defined number of machines under one agreement rather than purchasing individual boxed copies?

Accepted Answer

Microsoft Select or Open Volume License Agreement

Answer

Microsoft's Select and Open volume license programs let organizations license Windows 98 for multiple machines under a single agreement, simplifying compliance tracking.

Question 5

A Windows 98 system used to process credit card transactions in 1998 would have needed to consider early versions of which payment security framework that later evolved into PCI DSS?

Accepted Answer

Visa's Cardholder Information Security Program (CISP) and similar card-brand rules

Answer

Before PCI DSS (2004), individual card brands like Visa (CISP) and Mastercard (SDP) had their own cardholder data security requirements that merchants had to follow.

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Regulatory Frameworks & Compliance 5