WGU Course C841 - Legal Issues in
Information Security Quiz and Ans.
The main goal of information security is to protect:
A confidentiality, integrity, and availability
B non-public personally identifiable information
C financial data of public entities
D personal health data and biometrics - Ans>>A
The _____________________ established the national banking system in the United States.
A Bank Holding Company Act of 1956
B Bank Secrecy Act of 1970
C Gramm-Leach-Bliley Act
D National Bank Act of 1864 - Ans>>D
What does ISO stand for?
A International Organization for Security
B Independent Standards Organization
C International Security Organization
D International Organization for Standardization - Ans>>D
When testing a disaster recovery plan, which test involves hypothetical role-playing of a disaster?
A full interruption
B parallel
C scenario
D walk-through - Ans>>C
____________ is the practice of tracking a user's actions on the Internet in order to create a user profile.
,A Clickstreaming
B Targeted advertising
C Radio Frequency Identification (RFID)
D Online profiling - Ans>>D
What are the four privacy torts that still exist today?
A ECPA, Privacy Act, E-Government Act, and Patriot Act
B intrusion into seclusion, portrayal in a false light, appropriation of likeness or identity, and public disclosure of
private facts
C right to privacy, reasonable person standard, fair information practice principles, and the Wiretap Act
D in the U.S. Constitution, the First Amendment, Third Amendment, Fourth Amendment, and Fifth Amendment -
Ans>>B
The ________________________ protects the personal information of children online.
A Children's Internet Protection Act (CIPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Online Privacy Protection Act (COPPA) - Ans>>D
Congress can create laws in areas where the________________ allows it.
A U.S. Constitution
B President
C U.S. Supreme Court
D House of Representatives - Ans>>A
Compensatory, consequential, nominal, and liquidated are all types of ____________.
A performance
B remedies
C damages
D breach - Ans>>C
The _________________ creates international guiding principles for computer forensic examiners.
,A International Organization on Computer Evidence (IOCE)
B American Bar Association Forensic Division
C International Association of Computer Investigative Specialists (IACIS)
D U.S. Federal Bureau of Investigations (FBI) - Ans>>A
All of the following are eligibility requirements for the president of the United States except:
A None of these
B must be a resident of the United States for at least 14 years at the time of election
C must be at least 35 years old - Ans>>A
Massachusetts' "Standards for the Protection of Personal Information of Residents of the Commonwealth" was
released in September 2008 and is known for being "unique" in terms of its data protection standard. Which of the
following statements best captures that uniqueness?
A It attempts to regulate businesses outside of Massachusetts by requiring businesses to encrypt the personal data
of Massachusetts residents.
B The standard states that an information security program must include specific security requirements.
C Under the data protection standard, personal information is a person's first and last name, or first initial and last
name, and any of the following: Social Security number, driver's license number, or state identification card
number.
D It states that an entity's information security program must be a good fit for its size and scope. It also must fit the
entity's type of business. - Ans>>A
In 1998, Congress passed the _________________________.This law helps protect copyrights in the multimedia
world. It also contains provisions that help insulate Internet service providers from the actions of their customers.
A Online Copyright Infringement Liability Limitation Act
B Computer Maintenance Competition Assurance Act
C Vessel Hull Design Protection Act
D Digital Millennium Copyright Act - Ans>>D
How does the U.S. Constitution refer to itself?
, A The just Laws of the United States
B The first Law of the States
C The Federal Government blueprint
D The supreme Law of the Land - Ans>>D
_______________________ attempts to use real numbers to calculate risk and potential loss.
A Qualitative risk analysis
B Quantitative risk analysis
C A disaster recovery plan
D An incident response analysis - Ans>>B
SOX ___________ imposes criminal liability for fraudulent financial certifications.
A Section 302
B Section 708
C Section 906
D Section 404 - Ans>>C
A(n) _____________ is a formal request for a higher authority to review the decision of a lower court.
A holding
B appeal
C writ of certiorari
D pleading - Ans>>B
The Federal Reserve reports directly to:
A the U.S. Congress
B the U.S. Supreme Court
C the Senate
D the president - Ans>>A
One of the main goals of _______________ is to protect an organization's bottom line.
Information Security Quiz and Ans.
The main goal of information security is to protect:
A confidentiality, integrity, and availability
B non-public personally identifiable information
C financial data of public entities
D personal health data and biometrics - Ans>>A
The _____________________ established the national banking system in the United States.
A Bank Holding Company Act of 1956
B Bank Secrecy Act of 1970
C Gramm-Leach-Bliley Act
D National Bank Act of 1864 - Ans>>D
What does ISO stand for?
A International Organization for Security
B Independent Standards Organization
C International Security Organization
D International Organization for Standardization - Ans>>D
When testing a disaster recovery plan, which test involves hypothetical role-playing of a disaster?
A full interruption
B parallel
C scenario
D walk-through - Ans>>C
____________ is the practice of tracking a user's actions on the Internet in order to create a user profile.
,A Clickstreaming
B Targeted advertising
C Radio Frequency Identification (RFID)
D Online profiling - Ans>>D
What are the four privacy torts that still exist today?
A ECPA, Privacy Act, E-Government Act, and Patriot Act
B intrusion into seclusion, portrayal in a false light, appropriation of likeness or identity, and public disclosure of
private facts
C right to privacy, reasonable person standard, fair information practice principles, and the Wiretap Act
D in the U.S. Constitution, the First Amendment, Third Amendment, Fourth Amendment, and Fifth Amendment -
Ans>>B
The ________________________ protects the personal information of children online.
A Children's Internet Protection Act (CIPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Online Privacy Protection Act (COPPA) - Ans>>D
Congress can create laws in areas where the________________ allows it.
A U.S. Constitution
B President
C U.S. Supreme Court
D House of Representatives - Ans>>A
Compensatory, consequential, nominal, and liquidated are all types of ____________.
A performance
B remedies
C damages
D breach - Ans>>C
The _________________ creates international guiding principles for computer forensic examiners.
,A International Organization on Computer Evidence (IOCE)
B American Bar Association Forensic Division
C International Association of Computer Investigative Specialists (IACIS)
D U.S. Federal Bureau of Investigations (FBI) - Ans>>A
All of the following are eligibility requirements for the president of the United States except:
A None of these
B must be a resident of the United States for at least 14 years at the time of election
C must be at least 35 years old - Ans>>A
Massachusetts' "Standards for the Protection of Personal Information of Residents of the Commonwealth" was
released in September 2008 and is known for being "unique" in terms of its data protection standard. Which of the
following statements best captures that uniqueness?
A It attempts to regulate businesses outside of Massachusetts by requiring businesses to encrypt the personal data
of Massachusetts residents.
B The standard states that an information security program must include specific security requirements.
C Under the data protection standard, personal information is a person's first and last name, or first initial and last
name, and any of the following: Social Security number, driver's license number, or state identification card
number.
D It states that an entity's information security program must be a good fit for its size and scope. It also must fit the
entity's type of business. - Ans>>A
In 1998, Congress passed the _________________________.This law helps protect copyrights in the multimedia
world. It also contains provisions that help insulate Internet service providers from the actions of their customers.
A Online Copyright Infringement Liability Limitation Act
B Computer Maintenance Competition Assurance Act
C Vessel Hull Design Protection Act
D Digital Millennium Copyright Act - Ans>>D
How does the U.S. Constitution refer to itself?
, A The just Laws of the United States
B The first Law of the States
C The Federal Government blueprint
D The supreme Law of the Land - Ans>>D
_______________________ attempts to use real numbers to calculate risk and potential loss.
A Qualitative risk analysis
B Quantitative risk analysis
C A disaster recovery plan
D An incident response analysis - Ans>>B
SOX ___________ imposes criminal liability for fraudulent financial certifications.
A Section 302
B Section 708
C Section 906
D Section 404 - Ans>>C
A(n) _____________ is a formal request for a higher authority to review the decision of a lower court.
A holding
B appeal
C writ of certiorari
D pleading - Ans>>B
The Federal Reserve reports directly to:
A the U.S. Congress
B the U.S. Supreme Court
C the Senate
D the president - Ans>>A
One of the main goals of _______________ is to protect an organization's bottom line.
