Question 1

Encryption has a remarkably long and varied history.Spies have been using it to convey secret messages ever since there were secret messages to convey.One powerful method of encryption uses random digits.Two documents are prepared with the same random sequence of numbers.The spy is sent out with one and the spy master retains the other.The digits are used as follows.Suppose that the word to be encrypted is SPY and the random digits are 352.Then S becomes V (three letters after S) ,P becomes U (five letters after P) ,and Y becomes A (two letters after Y,restarting at A after Z) .The spy would encrypt a message and then destroy the document used to encrypt it.This is an early example of

Accepted Answer

A)   a hashing algorithm.
B)   asymmetric key encryption.
C)   symmetric key encryption.
D)   public key encryption.

Question 2

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)   Management
B)   Notice
C)   Choice and consent
D)   Use and retention

Question 3

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)   Collection
B)   Access
C)   Security
D)   Quality

Question 4

All of the following are associated with asymmetric encryption except

Accepted Answer

A)   speed.
B)   private keys.
C)   public keys.
D)   no need for key exchange. A

Question 5

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)   Collection
B)   Access
C)   Security
D)   Choice and consent

Question 6

Encryption is one of the many ways to protect information in transit over the internet.

Accepted Answer

A) True 
 B)False

Question 7

It is impossible to encrypt information

Accepted Answer

A)   transmitted over the Internet.
B)   stored on a hard drive.
C)   printed on a report.
D)   None of the above

Question 8

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)   Management
B)   Notice
C)   Choice and consent
D)   Use and retention

Question 9

A client approached Paxton Uffe and said,"Paxton,I need for my customers to make payments online using credit cards,but I want to make sure that the credit card data isn't intercepted.What do you suggest?" Paxton responded,"The most effective solution is to implement

Accepted Answer

A)   a data masking program."
B)   a virtual private network."
C)   a private cloud environment."
D)   an encryption system with digital signatures."

Question 10

Encryption has a remarkably long and varied history.The invention of writing was apparently soon followed by a desire to conceal messages.One of the earliest methods,attributed to an ancient Roman emperor,was the simple substitution of numbers for letters,for example A = 1, B = 2,etc.This is an example of

Accepted Answer

A)   a hashing algorithm.
B)   symmetric key encryption.
C)   asymmetric key encryption.
D)   a public key.

Question 11

After the information that needs to be protected has been identified,what step should be completed next?

Accepted Answer

A)   The information needs to be placed in a secure, central area.
B)   The information needs to be encrypted.
C)   The information needs to be classified in terms of its value to the organization.
D)   The information needs to be depreciated.

Question 12

These are used to create digital signatures.

Accepted Answer

A)   asymmetric encryption and hashing
B)   hashing and packet filtering
C)   packet filtering and encryption
D)   symmetric encryption and hashing

Question 13

Information rights management software can do all of the following except

Accepted Answer

A)   limiting access to specific files.
B)   limit action privileges to a specific time period.
C)   authenticate individuals accessing information.
D)   specify the actions individuals granted access to information can perform.

Question 14

Which of the following is not true regarding virtual private networks (VPN) ?

Accepted Answer

A)   VPNs provide the functionality of a privately owned network using the Internet.
B)   Using VPN software to encrypt information while it is in transit over the Internet in effect creates private communication channels, often referred to as tunnels, which are accessible only to those parties possessing the appropriate encryption and decryption keys.
C)   It is more expensive to reconfigure VPNs to include new sites than it is to add or remove the corresponding physical connections in a privately owned network.
D)   The cost of the VPN software is much less than the cost of leasing or buying the infrastructure (telephone lines, satellite links, communications equipment, etc.)  needed to create a privately owned secure communications network.

Question 15

If an organization asks you to disclose your date of birth and your address,but fails to establish any procedures for responding to customer complaints,the organization has likely violated which of the Generally Accepted Privacy Principles?

Accepted Answer

A)   Collection
B)   Access
C)   Security
D)   Monitoring and enforcement

Question 16

Which of the following descriptions is not associated with symmetric encryption?

Accepted Answer

A)   a shared secret key
B)   faster encryption
C)   lack of authentication
D)   separate keys for each communication party

Question 17

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Accepted Answer

A)   identification of information to be protected
B)   backing up the information
C)   controlling access to the information
D)   training B

Question 18

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Accepted Answer

A)   telemarketing.
B)   spam.
C)   direct mail.
D)   MLM. B

Question 19

Identify the first step in protecting the confidentiality of intellectual property below.

Accepted Answer

A)   Identifying who has access to the intellectual property
B)   Identifying the means necessary to protect the intellectual property
C)   Identifying the weaknesses surrounding the creation of the intellectual property
D)   Identifying what controls should be placed around the intellectual property

Question 20

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Accepted Answer

A)   anti-virus software
B)   data loss prevention software
C)   a digital watermark
D)   information rights software

Exam 9: Confidentiality and Privacy Controls

Correct Answer
verified

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct Answer
verified

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct Answer
verified

All of the following are associated with asymmetric encryption except

Correct Answer
verified
A

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct Answer
verified

Encryption is one of the many ways to protect information in transit over the internet.

Correct Answer
verified

It is impossible to encrypt information

Correct Answer
verified

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct Answer
verified

A client approached Paxton Uffe and said,"Paxton,I need for my customers to make payments online using credit cards,but I want to make sure that the credit card data isn't intercepted.What do you suggest?" Paxton responded,"The most effective solution is to implement

Correct Answer
verified

Correct Answer
verified

After the information that needs to be protected has been identified,what step should be completed next?

Correct Answer
verified

These are used to create digital signatures.

Correct Answer
verified

Information rights management software can do all of the following except

Correct Answer
verified

Which of the following is not true regarding virtual private networks (VPN) ?

Correct Answer
verified

If an organization asks you to disclose your date of birth and your address,but fails to establish any procedures for responding to customer complaints,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct Answer
verified

Which of the following descriptions is not associated with symmetric encryption?

Correct Answer
verified

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Correct Answer
verified
B

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Correct Answer
verified
B

Identify the first step in protecting the confidentiality of intellectual property below.

Correct Answer
verified

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Correct Answer
verified

Exam 9: Confidentiality and Privacy Controls

Correct AnswerverifiedShow Answer

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct AnswerverifiedShow Answer

If an organization asks you to disclose your date of birth and your address,but fails to take any steps to protect your private information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct AnswerverifiedShow Answer

All of the following are associated with asymmetric encryption except

Correct AnswerverifiedA

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct AnswerverifiedShow Answer

Encryption is one of the many ways to protect information in transit over the internet.

Correct AnswerverifiedShow Answer

It is impossible to encrypt information

Correct AnswerverifiedShow Answer

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct AnswerverifiedShow Answer

A client approached Paxton Uffe and said,"Paxton,I need for my customers to make payments online using credit cards,but I want to make sure that the credit card data isn't intercepted.What do you suggest?" Paxton responded,"The most effective solution is to implement

Correct AnswerverifiedShow Answer

Correct AnswerverifiedShow Answer

After the information that needs to be protected has been identified,what step should be completed next?

Correct AnswerverifiedShow Answer

These are used to create digital signatures.

Correct AnswerverifiedShow Answer

Information rights management software can do all of the following except

Correct AnswerverifiedShow Answer

Which of the following is not true regarding virtual private networks (VPN) ?

Correct AnswerverifiedShow Answer

If an organization asks you to disclose your date of birth and your address,but fails to establish any procedures for responding to customer complaints,the organization has likely violated which of the Generally Accepted Privacy Principles?

Correct AnswerverifiedShow Answer

Which of the following descriptions is not associated with symmetric encryption?

Correct AnswerverifiedShow Answer

Which of the following is not one of the basic actions that an organization must take to preserve the confidentiality of sensitive information?

Correct AnswerverifiedB

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

Correct AnswerverifiedB

Identify the first step in protecting the confidentiality of intellectual property below.

Correct AnswerverifiedShow Answer

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified