5.9 Identify Protected Data in a Network 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A software company is developing a new mobile app. The app's source code is proprietary and considered a trade secret. The company also has a patent pending for the app's unique user interface. A competitor releases a similar app that appears to copy the user interface. What is the most appropriate legal and technical response?

   • AIssue a takedown notice to the competitor's app store and demand removal.
   • BIgnore the competitor's app because the company has a patent pending.
   • CConduct an internal investigation to determine if the trade secret was leaked and review the patent's claims to assess infringement.
   • DFile a lawsuit for patent infringement and trade secret misappropriation.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization stores employee records that include religious beliefs and trade union membership. The security team must implement a protection strategy. Which approach is most appropriate?

   • AStore the data in a public cloud without additional controls
   • BTreat the data as public and allow unrestricted access
   • CDelete the data immediately to avoid liability
   • DApply encryption and strict access controls
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an appropriate measure for protecting personally sensitive information (PSI) in a network?

   • ADisabling all logging on systems that process PSI
   • BStoring PSI in plain text files on a shared network drive
   • CEmailing PSI to all employees for transparency
   • DImplementing role-based access control so only authorized personnel can view PSI
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing company stores its product design documents on a file server. The documents contain detailed specifications for a new product that has not yet been released. A competitor is rumored to be developing a similar product. What is the most important reason to protect these documents?

   • ATo comply with data privacy regulations for customer data.
   • BTo prevent the competitor from copying the design and gaining a market advantage.
   • CTo meet the requirements of HIPAA for health information.
   • DTo ensure the documents are available to all employees.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare provider is implementing a new patient portal that will allow patients to view their lab results and appointment history. The security team must ensure compliance with regulations governing protected health information. Which regulation is most directly applicable?

   • ASOX, because the provider is a publicly traded company.
   • BPCI DSS, because the portal will process payments.
   • CHIPAA, because the portal will handle protected health information.
   • DGDPR, because the portal will store personal data.
   Reveal Solution Discussion Select an answer first