CISSP CISSP Legal and Compliance

Question 1

Which US federal law established privacy rights and restrictions on the collection of personal data by federal agencies?

Accepted Answer

The Privacy Act of 1974

Answer

The Privacy Act of 1974 governs how US federal agencies collect, maintain, use, and disseminate personally identifiable information.

Question 2

Under HIPAA, what term describes organizations that handle protected health information on behalf of a covered entity?

Accepted Answer

Business associate

Answer

A business associate is a third party that creates, receives, maintains, or transmits PHI on behalf of a HIPAA-covered entity.

Question 3

What is the primary goal of the Gramm-Leach-Bliley Act (GLBA) in the context of information security?

Accepted Answer

To protect the personal financial information of consumers held by financial institutions

Answer

GLBA requires financial institutions to explain how they share and protect customers' private financial information.

Question 4

Which legal concept determines which country's laws apply when a crime involves actors or systems in multiple jurisdictions?

Accepted Answer

Jurisdiction

Answer

Jurisdiction defines the legal authority of a court or government to hear cases and enforce laws, which becomes complex in cross-border cybercrime.

Question 5

What type of law in the US covers crimes committed against computer systems or using computer systems?

Accepted Answer

Computer crime law (e.g., CFAA)

Answer

The Computer Fraud and Abuse Act (CFAA) is the primary US federal statute criminalizing unauthorized access to computer systems.

CISSP - Certified Information Systems Security Professional Practice Test