C841 LEGAL ISSUES IN INFORMATION
SECURITY PERFORMANCE CERTIFICATION
EVALUATION 2026 FULL QUESTIONS AND
SOLUTIONS
◉ Under the ____________________, federal agencies must 1) review their
IT systems for privacy risks; 2) post privacy policies on their Web
sites; 3) post machine-readable privacy policies on their Web sites;
and 4) report privacy activities to the OMB.
A Federal Information and Security Management Act (FISMA)
B E-Government Act of 2002
C Privacy Act of 1974
D Computer Security Act (CSA).
Answer: B
◉ Before ____________________, many workers experienced "job lock"
and were afraid that they would lose health care benefits if they
changed jobs.
A COBRA
B HIPAA
,C HITECH
D the creation of the Department of Health and Human Services
(HHS).
Answer: B
◉ What type of standard states a minimum level of behavior or
actions that must be met to comply with a policy?
A minimal
B safeguard
C procedural
D baseline.
Answer: D
◉ Which of the following may be exempt from state breach
notification laws because they are already subject to other laws with
specific data security requirements?
1 GLBA financial institutions
2 None of these
3 entities covered by HIPAA
A 1,3
,B 1,2.
Answer: A
◉ In which of the following circumstances would a library need to
disable a TPM?
A at the request of any school official
B at the request of a child with a document of written consent from
his/her parent
C at the request of an adult to view content for research or other
lawful purpose
D at the request of anyone over the age of 17.
Answer: C
◉ A merchant of an e-commerce Web site wants to accept credit
cards as a form of payment. Which of the following must the
merchant follow to ensure the safety of those payments?
A FISMA
B SOX
C GLBA
D PCI DSS.
Answer: D
, ◉ Which of the following is not one of the responsibilities of
information security managers?
A make sure that security is used to support business goals
B create information security standards, guidelines, and procedure
C participate in risk assessments
D manage the security infrastructure.
Answer: A
◉ A ____________________ is owned by many investors in the form of
stock.
A closed corporation
B sole proprietorship
C privately held company
D public company.
Answer: D
◉ All of the following statements are true except:
A To be admissible, evidence must be collected in a lawful manner.
SECURITY PERFORMANCE CERTIFICATION
EVALUATION 2026 FULL QUESTIONS AND
SOLUTIONS
◉ Under the ____________________, federal agencies must 1) review their
IT systems for privacy risks; 2) post privacy policies on their Web
sites; 3) post machine-readable privacy policies on their Web sites;
and 4) report privacy activities to the OMB.
A Federal Information and Security Management Act (FISMA)
B E-Government Act of 2002
C Privacy Act of 1974
D Computer Security Act (CSA).
Answer: B
◉ Before ____________________, many workers experienced "job lock"
and were afraid that they would lose health care benefits if they
changed jobs.
A COBRA
B HIPAA
,C HITECH
D the creation of the Department of Health and Human Services
(HHS).
Answer: B
◉ What type of standard states a minimum level of behavior or
actions that must be met to comply with a policy?
A minimal
B safeguard
C procedural
D baseline.
Answer: D
◉ Which of the following may be exempt from state breach
notification laws because they are already subject to other laws with
specific data security requirements?
1 GLBA financial institutions
2 None of these
3 entities covered by HIPAA
A 1,3
,B 1,2.
Answer: A
◉ In which of the following circumstances would a library need to
disable a TPM?
A at the request of any school official
B at the request of a child with a document of written consent from
his/her parent
C at the request of an adult to view content for research or other
lawful purpose
D at the request of anyone over the age of 17.
Answer: C
◉ A merchant of an e-commerce Web site wants to accept credit
cards as a form of payment. Which of the following must the
merchant follow to ensure the safety of those payments?
A FISMA
B SOX
C GLBA
D PCI DSS.
Answer: D
, ◉ Which of the following is not one of the responsibilities of
information security managers?
A make sure that security is used to support business goals
B create information security standards, guidelines, and procedure
C participate in risk assessments
D manage the security infrastructure.
Answer: A
◉ A ____________________ is owned by many investors in the form of
stock.
A closed corporation
B sole proprietorship
C privately held company
D public company.
Answer: D
◉ All of the following statements are true except:
A To be admissible, evidence must be collected in a lawful manner.
