CTS 1120 Final EXAM (LATEST) MOST RECENT
EXAM 2027|2027 ACTUAL COMPLETE REAL EXAM
QUESTIONS AND CORRECTLY WELL DEFINED
ANSWERS (VERIFIED ANSWERS) ALREADY
GRADED A+ | GUARANTEED SUCEESS!!
NEWEST EXAM | JUST RELEASED!!
Which of the following items would generally NOT be
considered personally
identifiable
information (PII)?
A.
Name
B. Driver's license
number
C. Trade
secret
D. Social Security number - ANSWER-C.
Trade secret
Alison retrieved data from a company database containing
personal information on customers. When she looks at the SSN
field, she sees values that look like this: "XXX-XX-9142." What
has happened to these records?
A. Encryption
B. Truncation
C. Hashing
D. Masking - ANSWER-D. Masking
,Vincent recently went to work for a hospital system. He is
reading about various regulations that apply to his new
industry. What law applies specifically to health records?
A. Health Insurance Portability and Accountability Act (HIPAA)
B. Sarbanes-Oxley (SOX) Act
C. Payment Card Industry Data Security Standard (PCI DSS)
D. Gramm-Leach-Bliley Act (GLBA) - ANSWER-A. Health
Insurance Portability and Accountability Act (HIPAA)
Erin is a system administrator for a federal government agency.
What law contains guidance on how she may operate a federal
information system? A.
Family Educational Rights and Privacy Act (FERPA)
B. Federal Information Security Management Act (FISMA)
C. Gramm-Leach-Bliley Act (GLBA)
D. Sarbanes-Oxley (SOX) Act - ANSWER-B. Federal Information
Security
Management Act (FISMA)
Federal agencies are required to name a senior official in
charge of information
security. What title is normally given to these
individuals?
A. Chief information officer
(CIO) )
B. Chief technology officer
(CTO
,C. Chief information security
officer (CISO)
D. Chief financial officer (CFO) - ANSWER-C. Chief information
security officer
(CISO)
What federal government agency is charged with the
responsibility of creating information security standards and
guidelines for use within the federal government and more
broadly across industries?
A. National Security Administration (NSA)
B. National Institute of Standards and Technology (NIST)
C. Department of Defense (DoD)
D. Federal Communications Commission (FCC) - ANSWER-B.
National Institute of Standards and Technology (NIST)
Howard is leading a project to commission a new information
system that will be used by a federal government agency. He is
working with senior officials to document and accept the risk of
operation prior to allowing use. What step of the risk
management framework is Howard completing? A. Implement
security controls in IT systems.
B. Assess security controls for effectiveness.
C. Authorize the IT system for processing.
D. Continuously monitor security controls. - ANSWER-C.
Authorize the IT system for processing.
Joe is the CEO of a company that handles medical billing for
several regional hospital systems. How would Joe's company
, be classified under the Health Insurance Portability and
Accountability Act (HIPAA)?
A. Covered entity as a health plan
B. Covered entity as a health care clearinghouse
C. Covered entity as a provider
D. Business associate of a covered entity - ANSWER-D.
Business associate of a covered entity
Under the Health Insurance Portability and Accountability Act
(HIPAA) Security Rule, what type of safeguards must be
implemented by all covered entities, regardless of the
circumstances?
A. Addressable
B. Standard
C. Security
D. Required - ANSWER-D. Required
Bobbi recently discovered that an email program used within
her health care
practice was sending sensitive medical information to
patients without using
encryption. She immediately corrected the problem because it
violated the company's security policy and standard rules.
What level of the Health Insurance Portability and
Accountability Act (HIPAA) violation likely took place? A. Tier
A
B. Tier B
C. Tier C
D. Tier D - ANSWER-A. Tier A
EXAM 2027|2027 ACTUAL COMPLETE REAL EXAM
QUESTIONS AND CORRECTLY WELL DEFINED
ANSWERS (VERIFIED ANSWERS) ALREADY
GRADED A+ | GUARANTEED SUCEESS!!
NEWEST EXAM | JUST RELEASED!!
Which of the following items would generally NOT be
considered personally
identifiable
information (PII)?
A.
Name
B. Driver's license
number
C. Trade
secret
D. Social Security number - ANSWER-C.
Trade secret
Alison retrieved data from a company database containing
personal information on customers. When she looks at the SSN
field, she sees values that look like this: "XXX-XX-9142." What
has happened to these records?
A. Encryption
B. Truncation
C. Hashing
D. Masking - ANSWER-D. Masking
,Vincent recently went to work for a hospital system. He is
reading about various regulations that apply to his new
industry. What law applies specifically to health records?
A. Health Insurance Portability and Accountability Act (HIPAA)
B. Sarbanes-Oxley (SOX) Act
C. Payment Card Industry Data Security Standard (PCI DSS)
D. Gramm-Leach-Bliley Act (GLBA) - ANSWER-A. Health
Insurance Portability and Accountability Act (HIPAA)
Erin is a system administrator for a federal government agency.
What law contains guidance on how she may operate a federal
information system? A.
Family Educational Rights and Privacy Act (FERPA)
B. Federal Information Security Management Act (FISMA)
C. Gramm-Leach-Bliley Act (GLBA)
D. Sarbanes-Oxley (SOX) Act - ANSWER-B. Federal Information
Security
Management Act (FISMA)
Federal agencies are required to name a senior official in
charge of information
security. What title is normally given to these
individuals?
A. Chief information officer
(CIO) )
B. Chief technology officer
(CTO
,C. Chief information security
officer (CISO)
D. Chief financial officer (CFO) - ANSWER-C. Chief information
security officer
(CISO)
What federal government agency is charged with the
responsibility of creating information security standards and
guidelines for use within the federal government and more
broadly across industries?
A. National Security Administration (NSA)
B. National Institute of Standards and Technology (NIST)
C. Department of Defense (DoD)
D. Federal Communications Commission (FCC) - ANSWER-B.
National Institute of Standards and Technology (NIST)
Howard is leading a project to commission a new information
system that will be used by a federal government agency. He is
working with senior officials to document and accept the risk of
operation prior to allowing use. What step of the risk
management framework is Howard completing? A. Implement
security controls in IT systems.
B. Assess security controls for effectiveness.
C. Authorize the IT system for processing.
D. Continuously monitor security controls. - ANSWER-C.
Authorize the IT system for processing.
Joe is the CEO of a company that handles medical billing for
several regional hospital systems. How would Joe's company
, be classified under the Health Insurance Portability and
Accountability Act (HIPAA)?
A. Covered entity as a health plan
B. Covered entity as a health care clearinghouse
C. Covered entity as a provider
D. Business associate of a covered entity - ANSWER-D.
Business associate of a covered entity
Under the Health Insurance Portability and Accountability Act
(HIPAA) Security Rule, what type of safeguards must be
implemented by all covered entities, regardless of the
circumstances?
A. Addressable
B. Standard
C. Security
D. Required - ANSWER-D. Required
Bobbi recently discovered that an email program used within
her health care
practice was sending sensitive medical information to
patients without using
encryption. She immediately corrected the problem because it
violated the company's security policy and standard rules.
What level of the Health Insurance Portability and
Accountability Act (HIPAA) violation likely took place? A. Tier
A
B. Tier B
C. Tier C
D. Tier D - ANSWER-A. Tier A
