<< Prev Question Next Question >>

Question 31/106

SCENARIO
Kyle is a new security compliance manager who will be responsible for coordinating and executing controls to ensure compliance with the company's information security policy and industry standards. Kyle is also new to the company, where collaboration is a core value. On his first day of new-hire orientation, Kyle's schedule included participating in meetings and observing work in the IT and compliance departments.
Kyle spent the morning in the IT department, where the CIO welcomed him and explained that her department was responsible for IT governance. The CIO and Kyle engaged in a conversation about the importance of identifying meaningful IT governance metrics. Following their conversation, the CIO introduced Kyle to Ted and Barney. Ted is implementing a plan to encrypt data at the transportation level of the organization's wireless network. Kyle would need to get up to speed on the project and suggest ways to monitor effectiveness once the implementation was complete. Barney explained that his short-term goals are to establish rules governing where data can be placed and to minimize the use of offline data storage.
Kyle spent the afternoon with Jill, a compliance specialist, and learned that she was exploring an initiative for a compliance program to follow self-regulatory privacy principles. Thanks to a recent internship, Kyle had some experience in this area and knew where Jill could find some support. Jill also shared results of the company's privacy risk assessment, noting that the secondary use of personal information was considered a high risk.
By the end of the day, Kyle was very excited about his new job and his new company. In fact, he learned about an open position for someone with strong qualifications and experience with access privileges, project standards board approval processes, and application-level obligations, and couldn't wait to recommend his friend Ben who would be perfect for the job.
Which of the following should Kyle recommend to Jill as the best source of support for her initiative?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (106q)
Question 1: Which of the following became a foundation for privacy princ...
Question 2: What is the most important requirement to fulfill when trans...
Question 3: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 4: What was the first privacy framework to be developed?...
Question 5: What term describes two re-identifiable data sets that both ...
Question 6: What is an example of a just-in-time notice?...
Question 7: What is the distinguishing feature of asymmetric encryption?...
Question 8: Which of these actions is NOT generally part of the responsi...
Question 9: Under the Family Educational Rights and Privacy Act (FERPA),...
Question 10: In the realm of artificial intelligence, how has deep learni...
Question 11: SCENARIO Kyle is a new security compliance manager who will ...
Question 12: SCENARIO Wesley Energy has finally made its move, acquiring ...
Question 13: SCENARIO It should be the most secure location housing data ...
Question 14: Which of the following would be the most appropriate solutio...
Question 15: SCENARIO You have just been hired by Ancillary.com, a seller...
Question 16: Which of the following suggests the greatest degree of trans...
Question 17: SCENARIO Looking back at your first two years as the Directo...
1 commentQuestion 18: SCENARIO - Please use the following to answer the next quest...
Question 19: What is a mistake organizations make when establishing priva...
Question 20: What is a main benefit of data aggregation?...
Question 21: Which of the following is a vulnerability of a sensitive bio...
Question 22: Which Organization for Economic Co-operation and Development...
1 commentQuestion 23: What would be an example of an organization transferring the...
Question 24: Which is the most accurate type of biometrics?...
Question 25: When releasing aggregates, what must be performed to magnitu...
Question 26: SCENARIO Carol was a U.S.-based glassmaker who sold her work...
1 commentQuestion 27: Which of the following is an example of the privacy risks as...
Question 28: A user who owns a resource wants to give other individuals a...
Question 29: A vendor has been collecting data under an old contract, not...
Question 30: A user who owns a resource wants to give other individuals a...
Question 31: SCENARIO Kyle is a new security compliance manager who will ...
Question 32: SCENARIO Wesley Energy has finally made its move, acquiring ...
Question 33: What has been found to undermine the public key infrastructu...
Question 34: What is the distinguishing feature of asymmetric encryption?...
Question 35: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 36: Which is NOT a suitable method for assuring the quality of d...
Question 37: SCENARIO - Please use the following to answer the next quest...
Question 38: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 39: If you are asked to advise on privacy concerns regarding pai...
Question 40: What is the distinguishing feature of asymmetric encryption?...
Question 41: SCENARIO - Please use the following to answer the next quest...
Question 42: What is the main reason the Do Not Track (DNT) header is not...
Question 43: Revocation and reissuing of compromised credentials is impos...
Question 44: What privacy risk is NOT mitigated by the use of encrypted c...
Question 45: Revocation and reissuing of compromised credentials is impos...
Question 46: What is the main benefit of using dummy data during software...
Question 47: A privacy engineer has been asked to review an online accoun...
Question 48: SCENARIO - Please use the following to answer the next quest...
Question 49: During a transport layer security (TLS) session, what happen...
Question 50: What is the main reason a company relies on implied consent ...
Question 51: What is the term for information provided to a social networ...
Question 52: What is the main function of the Amnesic Incognito Live Syst...
Question 53: What term describes two re-identifiable data sets that both ...
Question 54: Which technique is most likely to facilitate the deletion of...
Question 55: Which of the following is the least effective privacy preser...
Question 56: What tactic does pharming use to achieve its goal?...
Question 57: Why is first-party web tracking very difficult to prevent?...
Question 58: What must be done to destroy data stored on "write once read...
Question 59: How should the sharing of information within an organization...
Question 60: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 61: SCENARIO - Please use the following to answer the next quest...
Question 62: A sensitive biometrics authentication system is particularly...
Question 63: Which of the following is NOT relevant to a user exercising ...
Question 64: SCENARIO - Please use the following to answer the next quest...
Question 65: A credit card with the last few numbers visible is an exampl...
Question 66: What is the goal of privacy enhancing technologies (PETs) li...
Question 67: How should the sharing of information within an organization...
Question 68: What is a main benefit of data aggregation?...
Question 69: Which of the following entities would most likely be exempt ...
Question 70: In the realm of artificial intelligence, how has deep learni...
Question 71: SCENARIO Looking back at your first two years as the Directo...
Question 72: What is an example of a just-in-time notice?...
Question 73: Which activity would best support the principle of data qual...
Question 74: What is the main reason a company relies on implied consent ...
Question 75: SCENARIO Please use the following to answer the next questio...
Question 76: What is the potential advantage of homomorphic encryption?...
Question 77: When should code audits be concluded?...
Question 78: Aadhaar is a unique-identity number of 12 digits issued to a...
Question 79: SCENARIO - Please use the following to answer the next quest...
Question 80: During a transport layer security (TLS) session, what happen...
Question 81: What is the best way to protect privacy on a geographic info...
Question 82: What would be an example of an organization transferring the...
Question 83: What is the best way to protect privacy on a geographic info...
Question 84: What is the main privacy threat posed by Radio Frequency Ide...
Question 85: Which of the following most embodies the principle of Data P...
Question 86: Which is NOT a suitable action to apply to data when the ret...
Question 87: SCENARIO Please use the following to answer the next questio...
Question 88: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 89: After downloading and loading a mobile app, the user is pres...
Question 90: What has been identified as a significant privacy concern wi...
Question 91: What distinguishes a "smart" device?...
Question 92: SCENARIO It should be the most secure location housing data ...
Question 93: SCENARIO - Please use the following to answer the next quest...
Question 94: SCENARIO Carol was a U.S.-based glassmaker who sold her work...
Question 95: SCENARIO Clean-Q is a company that offers house-hold and off...
Question 96: Which is NOT a way to validate a person's identity?...
Question 97: SCENARIO Wesley Energy has finally made its move, acquiring ...
Question 98: What is the main benefit of using a private cloud?...
Question 99: What is the potential advantage of homomorphic encryption?...
Question 100: SCENARIO You have just been hired by Ancillary.com, a seller...
Question 101: SCENARIO Carol was a U.S.-based glassmaker who sold her work...
Question 102: SCENARIO Please use the following to answer the next questio...
Question 103: Which of the following is considered a records management be...
Question 104: What is the best way to protect privacy on a geographic info...
Question 105: SCENARIO - Please use the following to answer the next quest...
Question 106: What has been found to undermine the public key infrastructu...