Question 1

The Electronic Communications Privacy Act (ECPA) of 1986 affects law enforcement and intelligence agencies.

Accepted Answer

A) True 
 B)False  True

Question 2

PII is any piece of data that can be used alone or with other information to identify a single person.

Accepted Answer

A) True 
 B)False  True

Question 3

The purpose of the USA PATRIOT Act of 2001 is to enhance the investigatory tools that law enforcement can use, including e-mail communications, telephone records, Internet communications, medical records, and financial records.

Accepted Answer

A) True 
 B)False  True

Question 4

Which term is all about gathering information?

Accepted Answer

A)  Due diligence 
B)  Due care 
C)  Negligence 
D)  Liability 
A)  Due diligence 
B)  Due care 
C)  Negligence 
D)  Liability

Question 5

What is another word for shareware?

Accepted Answer

A)  Trialware 
B)  Freeware 
C)  Commercial software 
D)  Software piracy 
A)  Trialware 
B)  Freeware 
C)  Commercial software 
D)  Software piracy

Question 6

Which type of law reflects on the morals of the people and relies heavily on precedence?

Accepted Answer

A)  Civil/tort law 
B)  Criminal law 
C)  Common law 
D)  Civil code law 
A)  Civil/tort law 
B)  Criminal law 
C)  Common law 
D)  Civil code law

Question 7

What is the second step of the incident response procedure?

Accepted Answer

A)  Detect the incident. 
B)  Report the incident. 
C)  Recover from the incident. 
D)  Respond to the incident. 
A)  Detect the incident. 
B)  Report the incident. 
C)  Recover from the incident. 
D)  Respond to the incident.

Question 8

Which of the following is NOT part of the EU Principles on Privacy?

Accepted Answer

A)  Data should be collected in accordance with the law. 
B)  Data should be used for any purpose for which it is needed. 
C)  Data should be used only for a reasonable period of time. 
D)  Information transferred to other organizations can be transferred only if the sharing organization has adequate security in place. 
A)  Data should be collected in accordance with the law. 
B)  Data should be used for any purpose for which it is needed. 
C)  Data should be used only for a reasonable period of time. 
D)  Information transferred to other organizations can be transferred only if the sharing organization has adequate security in place.

Question 9

A safe harbor is a country that fails to legally protect personal data with the main aim being to attract companies engaged in the collection of the data.

Accepted Answer

A) True 
 B)False

Question 10

When investigating a computer crime, evidentiary rules do not need to be addressed.

Accepted Answer

A) True 
 B)False

Question 11

Civil/tort law is a group of laws that recognizes exclusive rights for creations of the mind.

Accepted Answer

A) True 
 B)False

Question 12

Due care and due diligence are independent of each other.

Accepted Answer

A) True 
 B)False

Question 13

What is the first step in the order of volatility?

Accepted Answer

A)  System processes 
B)  Network processes 
C)  Memory 
D)  Swap files 
A)  System processes 
B)  Network processes 
C)  Memory 
D)  Swap files

Question 14

Which law affects any organization that is publicly traded in the United States?

Accepted Answer

A)  Computer Fraud and Abuse Act (CFA
A)  of 1986 
B)  Gramm-Leach-Bliley Act (GLB
A)  of 1999 
C)  Health Insurance Portability and Accountability Act (HIPA
A)  
D)  Sarbanes-Oxley (SOX) Act 
A)  Computer Fraud and Abuse Act (CFA
A)  of 1986 
B)  Gramm-Leach-Bliley Act (GLB
A)  of 1999 
C)  Health Insurance Portability and Accountability Act (HIPA
A)  
D)  Sarbanes-Oxley (SOX) Act

Question 15

Which intellectual property right is granted to an individual or company to cover an invention C described in the application?

Accepted Answer

A)  Copyright 
B)  Patent 
C)  Trademark 
D)  Trade secret 
A)  Copyright 
B)  Patent 
C)  Trademark 
D)  Trade secret

Question 16

Software piracy is an example of computer prevalence crime.

Accepted Answer

A) True 
 B)False

Question 17

Most organizations that have trademarks attempt to protect these secrets using nondisclosure agreements (NDAs).

Accepted Answer

A) True 
 B)False

Question 18

When criminals use computers to help them steal confidential organizational data, a computer-assisted crime has occurred.

Accepted Answer

A) True 
 B)False

Question 19

Which computer crime occurs when a computer is involved in a computer crime without being the victim of the attack or the attacker?

Accepted Answer

A)  Computer prevalence crime 
B)  Computer targeted crime 
C)  Computer-assisted crime 
D)  Incidental computer crime 
A)  Computer prevalence crime 
B)  Computer targeted crime 
C)  Computer-assisted crime 
D)  Incidental computer crime

Question 20

Which act affects how private sector organizations collect, use, and disclose personal information in the course of commercial business in Canada?

Accepted Answer

A)  Electronic Communications Privacy Act (ECP
A)  of 1986 
B)  Payment Card Industry Data Security Standard (PCI DSS) 
C)  Personal Information Protection and Electronic Documents Act (PIPED
A)  
D)  Basel II 
A)  Electronic Communications Privacy Act (ECP
A)  of 1986 
B)  Payment Card Industry Data Security Standard (PCI DSS) 
C)  Personal Information Protection and Electronic Documents Act (PIPED
A)  
D)  Basel II

The Electronic Communications Privacy Act (ECPA) of 1986 affects law enforcement and intelligence agencies.

PII is any piece of data that can be used alone or with other information to identify a single person.

The purpose of the USA PATRIOT Act of 2001 is to enhance the investigatory tools that law enforcement can use, including e-mail communications, telephone records, Internet communications, medical records, and financial records.

Which term is all about gathering information?

What is another word for shareware?

Which type of law reflects on the morals of the people and relies heavily on precedence?

What is the second step of the incident response procedure?

Which of the following is NOT part of the EU Principles on Privacy?

A safe harbor is a country that fails to legally protect personal data with the main aim being to attract companies engaged in the collection of the data.

When investigating a computer crime, evidentiary rules do not need to be addressed.

Civil/tort law is a group of laws that recognizes exclusive rights for creations of the mind.

Due care and due diligence are independent of each other.

What is the first step in the order of volatility?

Which law affects any organization that is publicly traded in the United States?

Which intellectual property right is granted to an individual or company to cover an invention C described in the application?

Software piracy is an example of computer prevalence crime.

Most organizations that have trademarks attempt to protect these secrets using nondisclosure agreements (NDAs).

When criminals use computers to help them steal confidential organizational data, a computer-assisted crime has occurred.

Which computer crime occurs when a computer is involved in a computer crime without being the victim of the attack or the attacker?

Which act affects how private sector organizations collect, use, and disclose personal information in the course of commercial business in Canada?

The Cissp Exam

Access Control

Telecommunications and Network Security

Information Security Governance and Risk Management

Software Development Security

Cryptography

Security Architecture and Design

Operations Security

Business Continuity and Disaster Recovery

Physical Environmental Security

Filters

Exam 10: Legal, Regulations, Investigations, and Compliance

The Electronic Communications Privacy Act (ECPA) of 1986 affects law enforcement and intelligence agencies.

PII is any piece of data that can be used alone or with other information to identify a single person.

The purpose of the USA PATRIOT Act of 2001 is to enhance the investigatory tools that law enforcement can use, including e-mail communications, telephone records, Internet communications, medical records, and financial records.

Which term is all about gathering information?

What is another word for shareware?

Which type of law reflects on the morals of the people and relies heavily on precedence?

What is the second step of the incident response procedure?

Which of the following is NOT part of the EU Principles on Privacy?

A safe harbor is a country that fails to legally protect personal data with the main aim being to attract companies engaged in the collection of the data.

When investigating a computer crime, evidentiary rules do not need to be addressed.

Civil/tort law is a group of laws that recognizes exclusive rights for creations of the mind.

Due care and due diligence are independent of each other.

What is the first step in the order of volatility?

Which law affects any organization that is publicly traded in the United States?

Which intellectual property right is granted to an individual or company to cover an invention C described in the application?

Software piracy is an example of computer prevalence crime.

Most organizations that have trademarks attempt to protect these secrets using nondisclosure agreements (NDAs).

When criminals use computers to help them steal confidential organizational data, a computer-assisted crime has occurred.

Which computer crime occurs when a computer is involved in a computer crime without being the victim of the attack or the attacker?

Which act affects how private sector organizations collect, use, and disclose personal information in the course of commercial business in Canada?

The Cissp Exam

Access Control

Telecommunications and Network Security

Information Security Governance and Risk Management

Software Development Security

Cryptography

Security Architecture and Design

Operations Security

Business Continuity and Disaster Recovery

Physical Environmental Security

Filters