Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

M1 - CyberSec & Priv

CYBERSECURITY AND PRIVACY / IT0204

QuestionAnswer
Which principle requires organizations to demonstrate compliance with data protection laws? Accountability
Which U.S. law was passed after 9/11 to strengthen homeland defense? Homeland Security Act
A company processes personal data of EU citizens without GDPR compliance. This is lawful. False
What does DPIA stand for? Data Protection Impact Assessment
Which law governs EU member states’ network and information security? NIS Directive
A school posts student grades on a public website without consent. This complies with privacy law. False
A retailer collects customer consent before sending marketing emails. This complies with lawful processing. True
Which of the following is an example of personal data? Phone number
Which is a key risk of weak jurisdictional enforcement in data privacy? Cross-border misuse of data
An employee leaks client data via personal email. The company later updates policies. The leak still violates privacy law. True
An e-commerce store fails to notify affected customers after a breach. This complies with breach notification laws. False
Which are principles of lawful processing? Transparency | Legitimate purpose | Proportionality
Which are examples of sector-specific regulations? GLBA | HIPAA
What is the focus of the Payment Card Industry Data Security Standard (PCI DSS)? Credit card transaction security
Which are key rights of data subjects under privacy laws? Right to erasure (forgotten) | Right to rectification | Right to access
Which of the following is NOT sensitive personal data? Weather patterns
Which concept involves notifying individuals and authorities after a breach? Breach notification requirement
Which are key purposes of cybersecurity law? Safeguarding national security | Preventing cyberattacks | Protecting digital infrastructures
Which are examples of incident response plan steps? Identification of incident | Containment | Recovery
Which cybersecurity law promotes consumer trust in digital services? GDPR
Which are global privacy frameworks? GDPR | APEC Privacy Framework
An online service allows users to download their stored personal data upon request. This is a privacy right. True
Which of the following is an example of a sector-specific privacy law? HIPAA
Which is a challenge in cross-border data transfer? Different privacy jurisdictions
Which regulation is specific to the European Union? GDPR
Which principle prevents organizations from collecting unlimited data? Proportionality
Which international agency promotes cybersecurity in the EU? ENISA
A tech company enforces multi-factor authentication to protect user accounts. This aligns with cybersecurity best practice. True
Which decade saw the first wave of cybersecurity legislation? 1980s–1990s
A bank reports a data breach 6 months after discovery. This satisfies GDPR requirements. False
Which are elements of the CIA Triad? Confidentiality | Availability | Integrity
Which are examples of cybercrime? Hacking | Identity theft | Malware distribution
A government agency requires explicit consent before collecting fingerprints. This complies with privacy law. True
Which country introduced the “Right to be Forgotten”? European Union
A social media platform asks explicit consent before using personal photos for ads. This follows lawful processing. True
Which principle supports deleting personal data after consent is withdrawn? Right to be forgotten
Cybersecurity laws are important for: National security, personal data protection, and corporate accountability
Which of the following is an example of accountability in practice? Appointing a Data Protection Officer and keeping compliance records
Cybercrime includes: Hacking, identity theft, malware distribution
Which regulation requires strong security measures in healthcare institutions? HIPAA
A Data Protection Impact Assessment (DPIA) is required under GDPR when: Processing poses high risk to individuals’ rights
A retail shop collects customer emails and uses them for unrelated political ads. This complies with data minimization. False
Which are examples of encryption use in compliance? Protecting stored medical records | Protecting communications with SSL/TLS | Securing online payment transactions
A school encrypts student grades and allows only teachers to access them. This aligns with confidentiality. True
Which of the following is a benefit of harmonizing cybersecurity laws internationally? Facilitating trade and ensuring consistent protection
What does “jurisdiction” mean in data privacy? Legal authority over geographical area or data transfers
Which principle requires data collection to be limited to what is necessary? Proportionality
A data breach occurs when: Confidential or protected data is accessed without authorization
An airline keeps passenger passport data forever even after travel. This complies with retention limits. False
Which are safeguards for cross-border data transfers under GDPR? Binding Corporate Rules | Standard Contractual Clauses | Adequacy decisions
The GDPR came into effect in which decade? 2010s
Which best explains “data minimization”? Collecting only data necessary for stated purposes
A cloud storage provider retains backups indefinitely without justification. This complies with retention policies. False
A government publishes citizens’ addresses online without consent. This violates privacy law. True
Which U.S. law targets fraud using computers? CFAA
Which law enforces mandatory breach notifications within 72 hours? GDPR
The U.S. Computer Fraud and Abuse Act (CFAA) of 1986 primarily addressed: Computer crimes
What is the purpose of pseudonymization? Reducing re-identification risk by replacing identifiers
Which U.S. law addresses protection of patient health information? HIPAA
Which are examples of lawful bases for processing personal data under GDPR? Contract performance | Legal obligation | Consent
Which country pioneered early data protection legislation? Germany
Which is the most critical role of corporate accountability laws? Ensuring organizations safeguard data and face penalties if not compliant
A financial institution encrypts client data and conducts regular audits. This demonstrates accountability. True
A bank notifies customers of a breach within 72 hours. This complies with GDPR. True
What is the “right to be forgotten”? Requesting deletion of personal data no longer needed
Which framework by NIST improves cybersecurity for critical infrastructure? Cybersecurity Framework
Which are examples of accountability practices? Maintaining records of processing | Conducting DPIAs | Appointing a DPO when required
Which regulation addresses consumer privacy in financial services? GLBA
Why are privacy laws crucial in the digital age? Because personal data is a valuable commodity and misuse is a risk
An IT firm conducts a DPIA before launching biometric data processing. This aligns with GDPR. True
Which Philippine law established a comprehensive framework for data protection? Data Privacy Act of 2012
Which country passed the CFAA? United States
The principle of “data retention” requires: Storing data only as long as legally or operationally needed
Which principle emphasizes giving individuals control over their data? Consent
Which of the following is NOT part of the CIA Triad? Transparency
A cyberattack aiming to make a system unavailable refers to: Denial of Service
Which are benefits of international harmonization of cybersecurity laws? Easier compliance for global businesses | Facilitation of trade | Consistent data protection standards
A hospital restricts access to patient records only to attending physicians. This follows least privilege principle. True
Which U.S. Act of 2002 included provisions for critical infrastructure protection? Homeland Security Act
A website installs tracking cookies without informing users. This complies with transparency principles. False
What is the primary goal of encryption in privacy law compliance? To prevent unauthorized access to sensitive data
Privacy laws primarily regulate: Collection, processing, and sharing of personal data
A company deletes customer data once no longer needed. This follows data minimization. True
A company publishes anonymized statistics without identifiers. This generally complies with privacy law. True
A retailer refuses to correct inaccurate customer data when requested. This complies with privacy rights. False
A company shares medical records with advertisers without consent. This complies with HIPAA. False
Which legal concept refers to replacing identifiers with pseudonyms? Pseudonymization
What does encryption ensure? Confidentiality and integrity of data
The Data Privacy Act of 2012 was enacted in: Philippines
Which U.S. law requires financial institutions to protect consumers’ personal information? GLBA
Which is NOT an example of a cybersecurity incident? System software update
Which are possible consequences of data breaches? Loss of consumer trust | Legal liability | Financial penalties
Which directive aims to achieve a high common level of network security in the EU? NIS Directive
_______________________________________________________________________ (1 wrong answer)
_______________________________________________________________________ _______________________________________________________________________
Which is a historical driver for privacy law? Expansion of the internet and online threats
Which event led to stricter international privacy frameworks in the 2000s? Increasing frequency of cyberattacks
Which principle ensures that personal data is processed fairly and lawfully? Transparency and legitimate purpose
Which are recognized sensitive data categories? Biometric identifiers | Political opinions | Medical information
Which law requires impact assessments for high-risk processing activities? GDPR
Which EU law laid the foundation for modern data protection? Data Protection Directive of 1995
A hospital encrypts patient data but lets all employees access it without logging. This complies with confidentiality. False
Which of the following best defines “cybersecurity”? Protecting systems, networks, and data from digital attacks
What does “consent” mean in privacy law? Individual permission before data collection or processing
_______________________________________________________________________ _______________________________________________________________________
_______________________________________________________________________ _______________________________________________________________________
Which of the following defines “cybercrime”? Illegal activities conducted via computers or the internet
Which country’s law is considered a global benchmark for data protection? EU’s GDPR
The accountability principle requires: Records of processing and demonstration of compliance
Which are responsibilities of a Data Protection Officer (DPO)? Serving as contact point for authorities | Monitoring processing activities | Advising on compliance
Which regulation aims to harmonize cybersecurity across EU nations? NIS Directive
Which are major challenges in enforcing cybersecurity laws? Cross-border jurisdiction conflicts | Rapidly evolving technologies | Sophisticated cybercrime techniques
Which are critical elements of national cybersecurity strategies? Protecting critical infrastructure | Enforcing incident reporting | Public awareness campaigns
Which practices comply with data protection principles? Obtaining informed consent | Encrypting sensitive data | Implementing retention limits
A company transfers EU customer data to another country with no equivalent privacy law, without safeguards. This complies with GDPR. False
What is the main focus of cybersecurity law? Ensuring integrity, confidentiality, and availability of data
Which standard secures credit card transactions? PCI DSS
A government requires telecoms to retain communication data only for legally defined periods. This complies with retention limits. True
A bank ignores a client’s request to erase outdated personal data. This complies with the right to be forgotten. False
Which regulation governs personal health information in the healthcare sector? HIPAA
Which are considered personal data? Biometric Data | Name | IP Address
A hospital shares pseudonymized patient data for research with safeguards. This generally complies with privacy law. True
A company refuses to disclose how long it keeps customer data. This demonstrates accountability. False
Which type of law punishes online fraud and identity theft? Cybercrime law
Created by: Jsean-Ed
 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards