Exam 27: Data Breaches

A group of hackers decide to steal credit card details of the users of Swift Shopping Inc., a leading e-commerce company. They infect the security system of the company's third-party vendor and gain access into its internal network. They compromise an internal Windows server of the company and use a malware to extract customer data. Which of the following is illustrated in this scenario?

Which of the following is a direct cost of handling a data breach?

Stuart works for a financial brokerage. His job involves handling sensitive client information such as financial details. Stuart illegally transfers details of some clients from his office computer to his personal email ID, to misuse later. With reference to this situation, Stuart is guilty of ________.

Which of the following is TRUE of the measures to be taken by an organization in the event of a data breach?

List suggestions for preventing data loss?

Data extrusion helps organizations secure their data from possible data breaches.

Stolen credit card information is validated through a process called carding.

Stolen information is commonly used to pay bills.

If a company wants to prevent a SQL injection attack, all they have to do is train their users.

What are the steps involved in an organization's plan for a data breach?

Venclave Hospital is a privately-owned organization that specializes in treating neurological diseases. Which of the following regulatory laws governs the data security measures to be taken by this hospital for protecting against data breach?

When planning for a data breach which of the following should be part of the process?

Regulatory fines imposed after a data breach can never be higher than the financial damage done during the data breach.

Which of the following are NOT ways a company should handle a data breach?

________ are countermeasures designed to prevent sensitive data from being released to unauthorized persons.

Hackers experiment with new ________ or ways of attacking a target.

Decisions on how to respond to a data breach are most effective if they are made when the breach is happening.

An organization can easily stop a simple SQL injection attack on its online store by additional user training, stronger vendor authentication, or an internal network intrusion detection system.

Which of the following regulatory laws requires data protection for health care institutions?

Direct costs of handling a data breach do not include paying for detection of the breach.