Explain the Impact of Compliance Frameworks on Incident Handling 100-160 Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   A security analyst is reviewing the compliance frameworks that might apply to their organization. Which framework is specifically designed to protect the privacy of student education records and gives parents and eligible students rights over those records?

   • AHIPAA
   • BPCI-DSS
   • CFERPA
   • DFISMA
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company that processes both EU personal data and payment card data suffers a ransomware attack that encrypts servers containing both types of data. The incident response team is about to start eradication. Which compliance-driven consideration should influence the eradication step?

   • AOnly document the eradication steps if the incident is confirmed to involve personal data, otherwise no documentation is needed.
   • BImmediately wipe all affected servers to prevent further spread of the ransomware, even if that destroys forensic evidence.
   • CPreserve forensic evidence and document the eradication steps to support potential GDPR and PCI-DSS investigations and notifications.
   • DNotify the supervisory authority before beginning eradication, because GDPR requires notification before any remediation.
   Reveal Solution Discussion Select an answer first