<< Prev Question Next Question >>

Question 32/51

SCENARIO
Please use the following to answer the next question:
Chuck, a compliance auditor for a consulting firm focusing on healthcare clients, was required to travel to the client's office to perform an onsite review of the client's operations. He rented a car from Finley Motors upon arrival at the airport as so he could commute to and from the client's office. The car rental agreement was electronically signed by Chuck and included his name, address, driver's license, make/model of the car, billing rate, and additional details describing the rental transaction. On the second night, Chuck was caught by a red light camera not stopping at an intersection on his way to dinner. Chuck returned the car back to the car rental agency at the end week without mentioning the infraction and Finley Motors emailed a copy of the final receipt to the address on file.
Local law enforcement later reviewed the red light camera footage. As Finley Motors is the registered owner of the car, a notice was sent to them indicating the infraction and fine incurred. This notice included the license plate number, occurrence date and time, a photograph of the driver, and a web portal link to a video clip of the violation for further review. Finley Motors, however, was not responsible for the violation as they were not driving the car at the time and transferred the incident to AMP Payment Resources for further review. AMP Payment Resources identified Chuck as the driver based on the rental agreement he signed when picking up the car and then contacted Chuck directly through a written letter regarding the infraction to collect the fine.
After reviewing the incident through the AMP Payment Resources' web portal, Chuck paid the fine using his personal credit card. Two weeks later, Finley Motors sent Chuck an email promotion offering 10% off a future rental.
What is the strongest method for authenticating Chuck's identity prior to allowing access to his violation information through the AMP Payment Resources web portal?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (51q)
Question 1: Which technique is most likely to facilitate the deletion of...
Question 2: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 3: A key principle of an effective privacy policy is that it sh...
Question 4: SCENARIO Tom looked forward to starting his new position wit...
Question 5: All of the following can be indications of a ransomware atta...
Question 6: What is the most important requirement to fulfill when trans...
Question 7: Which activity would best support the principle of data qual...
Question 8: What would be an example of an organization transferring the...
Question 9: Which is the most accurate type of biometrics?...
Question 10: How should the sharing of information within an organization...
Question 11: How can a hacker gain control of a smartphone to perform rem...
Question 12: A privacy engineer has been asked to review an online accoun...
Question 13: What Privacy by Design (PbD) element should include a de-ide...
Question 14: SCENARIO Please use the following to answer next question: E...
Question 15: Which of the following entities would most likely be exempt ...
Question 16: When releasing aggregates, what must be performed to magnitu...
Question 17: Why is first-party web tracking very difficult to prevent?...
Question 18: SCENARIO Carol was a U.S.-based glassmaker who sold her work...
Question 19: What is an Access Control List?...
Question 20: A company seeking to hire engineers in Silicon Valley ran an...
Question 21: What privacy risk is NOT mitigated by the use of encrypted c...
Question 22: Which is NOT a drawback to using a biometric recognition sys...
Question 23: What is the main function of the Amnesic Incognito Live Syst...
Question 24: Granting data subjects the right to have data corrected, ame...
Question 25: A privacy engineer reviews a newly developed on-line registr...
Question 26: Which of the following is NOT a workplace surveillance best ...
Question 27: What was the first privacy framework to be developed?...
Question 28: Which of the following is a vulnerability of a sensitive bio...
Question 29: What must be done to destroy data stored on "write once read...
Question 30: Which of the following functionalities can meet some of the ...
Question 31: Which of the following is an example of drone "swarming"?...
Question 32: SCENARIO Please use the following to answer the next questio...
Question 33: How does k-anonymity help to protect privacy in micro data s...
Question 34: What is the best way to protect privacy on a geographic info...
Question 35: What is the main benefit of using a private cloud?...
Question 36: What can be used to determine the type of data in storage wi...
Question 37: SCENARIO Please use the following to answer the next questio...
Question 38: Revocation and reissuing of compromised credentials is impos...
Question 39: Which is NOT a way to validate a person's identity?...
Question 40: Which of the following would be the most appropriate solutio...
Question 41: SCENARIO Kyle is a new security compliance manager who will ...
Question 42: To comply with the Sarbanes-Oxley Act (SOX), public companie...
Question 43: A key principle of an effective privacy policy is that it sh...
Question 44: What is the potential advantage of homomorphic encryption?...
Question 45: Which of the following statements best describes the relatio...
Question 46: SCENARIO Please use the following to answer the next questio...
Question 47: What is the main privacy threat posed by Radio Frequency Ide...
Question 48: After downloading and loading a mobile app, the user is pres...
Question 49: Which of the following would be the best method of ensuring ...
Question 50: SCENARIO Please use the following to answer next question: E...
Question 51: SCENARIO Please use the following to answer the next questio...