FFM Prep (Individual Market Certification) questions with correct answers

Information Security CORRECT ANSWER Information security refers to the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability. Required Security Controls CORRECT ANSWER -PII is only used by or disclosed to those authorized to receive or view it; -PII is protected against any reasonably anticipated threats or hazards to the confidentiality, integrity, and availability of such information; -PII is protected against any reasonably anticipated uses or disclosures of such information that are not permitted or required by law; and -PII is securely destroyed or disposed of in an appropriate and reasonable manner and in accordance with retention schedules. -Agents and brokers must monitor, periodically assess, and update their security controls and related system risks to ensure the continued effectiveness of those controls. They must also develop and utilize secure electronic interfaces when transmitting PII electronically. 3 key elements to protect information CORRECT ANSWER Confidentiality, Availability, Integrity Threat CORRECT ANSWER The potential to cause unauthorized disclosure, changes to, or destruction of an asset Vulnerability CORRECT ANSWER Any flaw or weakness that can be exploited and could result in a breach or a violation of a system's security policy Risk CORRECT ANSWER Likelihood that a threat will exploit a vulnerability AFA Basics CORRECT ANSWER extension to age 26 guarantee issue MLR