WGU Course C841 question with
answers
The main goal of information security is to protect:
A confidentiality, integrity, and availability
B non-public personally identifiable information
C financial data of public entities
D personal health data and biometrics - -A
-The _____________________ established the national banking system in the United
States.
A Bank Holding Company Act of 1956
B Bank Secrecy Act of 1970
C Gramm-Leach-Bliley Act
D National Bank Act of 1864 - -D
-What does ISO stand for?
A International Organization for Security
B Independent Standards Organization
C International Security Organization
D International Organization for Standardization - -D
-When testing a disaster recovery plan, which test involves hypothetical role-
playing of a disaster?
A full interruption
B parallel
C scenario
D walk-through - -C
-____________ is the practice of tracking a user's actions on the Internet in order to
create a user profile.
A Clickstreaming
B Targeted advertising
C Radio Frequency Identification (RFID)
D Online profiling - -D
-What are the four privacy torts that still exist today?
A ECPA, Privacy Act, E-Government Act, and Patriot Act
B intrusion into seclusion, portrayal in a false light, appropriation of likeness or
identity, and public disclosure of private facts
C right to privacy, reasonable person standard, fair information practice principles,
and the Wiretap Act
,D in the U.S. Constitution, the First Amendment, Third Amendment, Fourth
Amendment, and Fifth Amendment - -B
-The ________________________ protects the personal information of children online.
A Children's Internet Protection Act (CIPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Online Privacy Protection Act (COPPA) - -D
-Congress can create laws in areas where the________________ allows it.
A U.S. Constitution
B President
C U.S. Supreme Court
D House of Representatives - -A
-Compensatory, consequential, nominal, and liquidated are all types of
____________.
A performance
B remedies
C damages
D breach - -C
-The _________________ creates international guiding principles for computer forensic
examiners.
A International Organization on Computer Evidence (IOCE)
B American Bar Association Forensic Division
C International Association of Computer Investigative Specialists (IACIS)
D U.S. Federal Bureau of Investigations (FBI) - -A
-All of the following are eligibility requirements for the president of the United
States except:
A None of these
B must be a resident of the United States for at least 14 years at the time of
election
C must be at least 35 years old - -A
-Massachusetts' "Standards for the Protection of Personal Information of Residents
of the Commonwealth" was released in September 2008 and is known for being
"unique" in terms of its data protection standard. Which of the following statements
best captures that uniqueness?
A It attempts to regulate businesses outside of Massachusetts by requiring
businesses to encrypt the personal data of Massachusetts residents.
,B The standard states that an information security program must include specific
security requirements.
C Under the data protection standard, personal information is a person's first and
last name, or first initial and last name, and any of the following: Social Security
number, driver's license number, or state identification card number.
D It states that an entity's information security program must be a good fit for its
size and scope. It also must fit the entity's type of business. - -A
-In 1998, Congress passed the _________________________.This law helps protect
copyrights in the multimedia world. It also contains provisions that help insulate
Internet service providers from the actions of their customers.
A Online Copyright Infringement Liability Limitation Act
B Computer Maintenance Competition Assurance Act
C Vessel Hull Design Protection Act
D Digital Millennium Copyright Act - -D
-How does the U.S. Constitution refer to itself?
A The just Laws of the United States
B The first Law of the States
C The Federal Government blueprint
D The supreme Law of the Land - -D
-_______________________ attempts to use real numbers to calculate risk and
potential loss.
A Qualitative risk analysis
B Quantitative risk analysis
C A disaster recovery plan
D An incident response analysis - -B
-SOX ___________ imposes criminal liability for fraudulent financial certifications.
A Section 302
B Section 708
C Section 906
D Section 404 - -C
-A(n) _____________ is a formal request for a higher authority to review the decision
of a lower court.
A holding
B appeal
C writ of certiorari
D pleading - -B
-The Federal Reserve reports directly to:
, A the U.S. Congress
B the U.S. Supreme Court
C the Senate
D the president - -A
-One of the main goals of _______________ is to protect an organization's bottom line.
A tactical planning
B IT management
C an incident response plan
D risk management - -D
-The Family Policy Compliance Office (FPCO) provides oversight for the
____________________.
A Children's Online Privacy Protection Act (COPPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Internet Protection Act (CIPA) - -B
-In which of the following places would a person have "a reasonable expectation of
privacy"?
A on the street
B in the workplace
C in a public restroom
D in one's home - -D
-Which of the following are types of export control regulations?
1 Export Administration Regulations (EAR)
2 None of these
3 International Traffic in Arms Regulations (ITAR)
A 1,3
B 1,2 - -A
-Which of the following statements best captures the function of the Federal Trade
Commission (FTC)?
A to promote consumer protection and eliminate practices that are harmful to
competitive business
B to make frequent reports to the president on its actions
C to create the penalties for individuals and organizations that violate rules
D to be one of the most important regulatory authorities for consumer and some
business practice issues - -A
-What makes a distributed denial of service attack "distributed"?
answers
The main goal of information security is to protect:
A confidentiality, integrity, and availability
B non-public personally identifiable information
C financial data of public entities
D personal health data and biometrics - -A
-The _____________________ established the national banking system in the United
States.
A Bank Holding Company Act of 1956
B Bank Secrecy Act of 1970
C Gramm-Leach-Bliley Act
D National Bank Act of 1864 - -D
-What does ISO stand for?
A International Organization for Security
B Independent Standards Organization
C International Security Organization
D International Organization for Standardization - -D
-When testing a disaster recovery plan, which test involves hypothetical role-
playing of a disaster?
A full interruption
B parallel
C scenario
D walk-through - -C
-____________ is the practice of tracking a user's actions on the Internet in order to
create a user profile.
A Clickstreaming
B Targeted advertising
C Radio Frequency Identification (RFID)
D Online profiling - -D
-What are the four privacy torts that still exist today?
A ECPA, Privacy Act, E-Government Act, and Patriot Act
B intrusion into seclusion, portrayal in a false light, appropriation of likeness or
identity, and public disclosure of private facts
C right to privacy, reasonable person standard, fair information practice principles,
and the Wiretap Act
,D in the U.S. Constitution, the First Amendment, Third Amendment, Fourth
Amendment, and Fifth Amendment - -B
-The ________________________ protects the personal information of children online.
A Children's Internet Protection Act (CIPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Online Privacy Protection Act (COPPA) - -D
-Congress can create laws in areas where the________________ allows it.
A U.S. Constitution
B President
C U.S. Supreme Court
D House of Representatives - -A
-Compensatory, consequential, nominal, and liquidated are all types of
____________.
A performance
B remedies
C damages
D breach - -C
-The _________________ creates international guiding principles for computer forensic
examiners.
A International Organization on Computer Evidence (IOCE)
B American Bar Association Forensic Division
C International Association of Computer Investigative Specialists (IACIS)
D U.S. Federal Bureau of Investigations (FBI) - -A
-All of the following are eligibility requirements for the president of the United
States except:
A None of these
B must be a resident of the United States for at least 14 years at the time of
election
C must be at least 35 years old - -A
-Massachusetts' "Standards for the Protection of Personal Information of Residents
of the Commonwealth" was released in September 2008 and is known for being
"unique" in terms of its data protection standard. Which of the following statements
best captures that uniqueness?
A It attempts to regulate businesses outside of Massachusetts by requiring
businesses to encrypt the personal data of Massachusetts residents.
,B The standard states that an information security program must include specific
security requirements.
C Under the data protection standard, personal information is a person's first and
last name, or first initial and last name, and any of the following: Social Security
number, driver's license number, or state identification card number.
D It states that an entity's information security program must be a good fit for its
size and scope. It also must fit the entity's type of business. - -A
-In 1998, Congress passed the _________________________.This law helps protect
copyrights in the multimedia world. It also contains provisions that help insulate
Internet service providers from the actions of their customers.
A Online Copyright Infringement Liability Limitation Act
B Computer Maintenance Competition Assurance Act
C Vessel Hull Design Protection Act
D Digital Millennium Copyright Act - -D
-How does the U.S. Constitution refer to itself?
A The just Laws of the United States
B The first Law of the States
C The Federal Government blueprint
D The supreme Law of the Land - -D
-_______________________ attempts to use real numbers to calculate risk and
potential loss.
A Qualitative risk analysis
B Quantitative risk analysis
C A disaster recovery plan
D An incident response analysis - -B
-SOX ___________ imposes criminal liability for fraudulent financial certifications.
A Section 302
B Section 708
C Section 906
D Section 404 - -C
-A(n) _____________ is a formal request for a higher authority to review the decision
of a lower court.
A holding
B appeal
C writ of certiorari
D pleading - -B
-The Federal Reserve reports directly to:
, A the U.S. Congress
B the U.S. Supreme Court
C the Senate
D the president - -A
-One of the main goals of _______________ is to protect an organization's bottom line.
A tactical planning
B IT management
C an incident response plan
D risk management - -D
-The Family Policy Compliance Office (FPCO) provides oversight for the
____________________.
A Children's Online Privacy Protection Act (COPPA)
B Family Educational Rights and Privacy Act (FERPA)
C Health Insurance Portability and Accountability Act (HIPAA)
D Children's Internet Protection Act (CIPA) - -B
-In which of the following places would a person have "a reasonable expectation of
privacy"?
A on the street
B in the workplace
C in a public restroom
D in one's home - -D
-Which of the following are types of export control regulations?
1 Export Administration Regulations (EAR)
2 None of these
3 International Traffic in Arms Regulations (ITAR)
A 1,3
B 1,2 - -A
-Which of the following statements best captures the function of the Federal Trade
Commission (FTC)?
A to promote consumer protection and eliminate practices that are harmful to
competitive business
B to make frequent reports to the president on its actions
C to create the penalties for individuals and organizations that violate rules
D to be one of the most important regulatory authorities for consumer and some
business practice issues - -A
-What makes a distributed denial of service attack "distributed"?
