NVCC ITN 267 CyberLaw Midterm Exam 2023 Solved
Correctly
A ______________ is some kind of wrongful act that harms or hurts a
person.
Tort
A ______________ is the official schedule of a court and the events in cases
pending before a court.
Docket
A merchant of an e-commerce Web site wants to accept credit cards as a
form of payment. Which of the following must the merchant follow to
ensure the safety of those payments?
PCI DSS
A single point of failure is a piece of hardware or application that is key to
________________________.
the functioning of the entire system
A(n) ____________________________ is a formal request for a higher
authority to review the decision of a lower court.
Appeal
Administrative safeguards usually take the form of organizational policies,
which state the rules of the workplace. True or False
TRUE
All of the following are true statements about the American legal
system except:
each branch has a separate sphere of authority (checks)
All of the following are true with respect to cryptography except:
only used today by health care providers to protect health care data
All of the following are ways to protect confidentiality except:
shoulder surfing
Audits are ______ performed by independent organizations.
occasionally
Biometric data is considered personally identifiable information. True or False.
TRUE
COPPA requires Web site operators collecting information from children to:
Obtain parental consent
Collection and use of a child's personal information such as name, e-mail,
address, or social security number by a Web site operate is governed by:
COPPA
Confidential describes information that could cause damage to U.S. security
if disclosed to an unauthorized person. This is the lowest data classification level.
TRUE OR FALSE
TRUE
Courts are struggling with the privacy implications of GPS tracking. In
2009, New York's highest court held that police officers must have a
______________in order to place a GPS tracking device on a suspect's car.
, Warrant
Deleting a file by mistake does not count as compromising the integrity of
information, because it prevents unauthorized people from viewing that
information. TRUE OR FALSE
FALSE
FERPA applies to any education agencies or institutions that receive funding
from the U.S. Department of Education (ED). Which of the following
in not an educational agency or institution?
non-profit organizations that offer educational programs
How does the U.S. Constitution refer to itself?
The supreme Law of the Land
How might the average person use cookies in a beneficial way?
You save an image of a relaxing, cloud-filled sky that appears
every time you log-on to your Twitter account.
In 2013, a social media company paid $800,000 to settle charges with the Federal
Trade Commission (FTC). The company had an application that allowed children
to create journals and share those journals online. Children could also post
photos and share location information. The company collected the birth dates of
3,000 children before getting parental permission. The FTC alleged that the
company violated which of the following?
Children's online privacy protection act (COPPA)
In January 2007, TJX disclosed that hackers had breached its credit card
systems. The company reported that the attackers might have accessed credit
card data going back to 2002. It reported that 45.7 million credit and debit
card numbers might have been disclosed. At the time, the breach was
believed to be the largest ever. Banks and customers sued TJX in connection
with the breach. State governments also sued the company for failing to
protect the credit card information of state residents. Given the nature of this
breach, which federal agency opened an investigation?
The Federal Trade Commision
In November 2004, the FTC filed a complaint against Nationwide Mortgage
Group, Inc. In its complaint, the FTC stated that Nationwide collected
sensitive customer information, but that it had no policies and procedures in
place to protect that information. It also stated that Nationwide failed to
monitor its computer network for vulnerabilities that would expose stored
customer information to attack. Which of the following rules did the
Nationwide violate?
Safeguards Rule
In what ways can you classify safeguards
Safeguards can be classified by how they work or how they act.
In which of the following areas of the workplace is an employee most likely to
have a reasonable expectation of privacy
Employee Lounge
In which of the following circumstances would a library need to disable a
TPM?
Correctly
A ______________ is some kind of wrongful act that harms or hurts a
person.
Tort
A ______________ is the official schedule of a court and the events in cases
pending before a court.
Docket
A merchant of an e-commerce Web site wants to accept credit cards as a
form of payment. Which of the following must the merchant follow to
ensure the safety of those payments?
PCI DSS
A single point of failure is a piece of hardware or application that is key to
________________________.
the functioning of the entire system
A(n) ____________________________ is a formal request for a higher
authority to review the decision of a lower court.
Appeal
Administrative safeguards usually take the form of organizational policies,
which state the rules of the workplace. True or False
TRUE
All of the following are true statements about the American legal
system except:
each branch has a separate sphere of authority (checks)
All of the following are true with respect to cryptography except:
only used today by health care providers to protect health care data
All of the following are ways to protect confidentiality except:
shoulder surfing
Audits are ______ performed by independent organizations.
occasionally
Biometric data is considered personally identifiable information. True or False.
TRUE
COPPA requires Web site operators collecting information from children to:
Obtain parental consent
Collection and use of a child's personal information such as name, e-mail,
address, or social security number by a Web site operate is governed by:
COPPA
Confidential describes information that could cause damage to U.S. security
if disclosed to an unauthorized person. This is the lowest data classification level.
TRUE OR FALSE
TRUE
Courts are struggling with the privacy implications of GPS tracking. In
2009, New York's highest court held that police officers must have a
______________in order to place a GPS tracking device on a suspect's car.
, Warrant
Deleting a file by mistake does not count as compromising the integrity of
information, because it prevents unauthorized people from viewing that
information. TRUE OR FALSE
FALSE
FERPA applies to any education agencies or institutions that receive funding
from the U.S. Department of Education (ED). Which of the following
in not an educational agency or institution?
non-profit organizations that offer educational programs
How does the U.S. Constitution refer to itself?
The supreme Law of the Land
How might the average person use cookies in a beneficial way?
You save an image of a relaxing, cloud-filled sky that appears
every time you log-on to your Twitter account.
In 2013, a social media company paid $800,000 to settle charges with the Federal
Trade Commission (FTC). The company had an application that allowed children
to create journals and share those journals online. Children could also post
photos and share location information. The company collected the birth dates of
3,000 children before getting parental permission. The FTC alleged that the
company violated which of the following?
Children's online privacy protection act (COPPA)
In January 2007, TJX disclosed that hackers had breached its credit card
systems. The company reported that the attackers might have accessed credit
card data going back to 2002. It reported that 45.7 million credit and debit
card numbers might have been disclosed. At the time, the breach was
believed to be the largest ever. Banks and customers sued TJX in connection
with the breach. State governments also sued the company for failing to
protect the credit card information of state residents. Given the nature of this
breach, which federal agency opened an investigation?
The Federal Trade Commision
In November 2004, the FTC filed a complaint against Nationwide Mortgage
Group, Inc. In its complaint, the FTC stated that Nationwide collected
sensitive customer information, but that it had no policies and procedures in
place to protect that information. It also stated that Nationwide failed to
monitor its computer network for vulnerabilities that would expose stored
customer information to attack. Which of the following rules did the
Nationwide violate?
Safeguards Rule
In what ways can you classify safeguards
Safeguards can be classified by how they work or how they act.
In which of the following areas of the workplace is an employee most likely to
have a reasonable expectation of privacy
Employee Lounge
In which of the following circumstances would a library need to disable a
TPM?
