RCC RCC Data Privacy and Information Security Compliance 2

Question 1

Under the Gramm-Leach-Bliley Act (GLBA), financial institutions must provide customers with:

Accepted Answer

Privacy notices explaining information sharing practices and an opt-out right

Answer

GLBA requires financial institutions to provide privacy notices that describe their information-sharing practices and allow consumers to opt out of sharing with non-affiliated third parties.

Question 2

An organization's 'acceptable use policy' for information systems PRIMARILY serves to:

Accepted Answer

Establish rules for appropriate use of company technology and data resources

Answer

An acceptable use policy defines permissible and prohibited uses of organizational systems, networks, and data, forming a key component of the information security compliance framework.

Question 3

What is the primary goal of 'data classification' in an information security compliance program?

Accepted Answer

To categorize data by sensitivity so appropriate protection controls can be applied

Answer

Data classification assigns sensitivity levels (e.g., public, internal, confidential, restricted) to data assets so that commensurate security and privacy controls can be applied based on the data's risk.

Question 4

The Children's Online Privacy Protection Act (COPPA) requires operators of online services to obtain verifiable parental consent before collecting personal information from children under:

Accepted Answer

13 years of age

Answer

COPPA applies to the online collection of personal information from children under 13 and requires verifiable parental consent before such collection occurs.

Question 5

Which concept describes the idea that individuals should be able to access and correct their own personal information held by an organization?

Accepted Answer

Access and rectification rights

Answer

Access and rectification rights give individuals the ability to review the personal data held about them and request corrections to inaccurate or incomplete information.

(RCC) Regulatory Compliance Certification Practice Test

(RCC) Regulatory Compliance Certification Practice Test

RCC RCC Data Privacy and Information Security Compliance 2