5.9 Identify Protected Data in a Network 200-201 Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A multinational company is implementing a new employee monitoring system that will collect data on employee productivity, including keystroke logs, website visits, and time tracking. The company operates in the EU and is subject to GDPR. The data is considered PSI because it reveals personal behavior. The security team must design a solution that complies with GDPR while meeting the company's monitoring needs. What is the most important consideration?

   • AObtain explicit consent from employees before collecting monitoring data.
   • BStore the data on servers located outside the EU to avoid GDPR jurisdiction.
   • CAnonymize the data immediately after collection to avoid GDPR obligations.
   • DEnsure the monitoring is necessary for a legitimate purpose and conduct a data protection impact assessment.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Why is it important for an organization to protect its intellectual property (IP) in a network?

   • ATo comply with international data transfer laws
   • BTo reduce the number of employees needed for IT support
   • CTo ensure that all data is stored in the cloud
   • DTo prevent competitors from gaining an unfair advantage and to maintain revenue streams
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A marketing department wants to run a customer satisfaction survey. They plan to collect customer names, email addresses, and responses about their experience with the company's products. The security team must classify the survey data. Which classification is most appropriate?

   • APII only, because the survey collects names and email addresses.
   • BPSI only, because the survey responses are personal opinions.
   • CBoth PII and PSI, because the survey collects identifiers and personal opinions.
   • DPHI, because the survey asks about product experiences.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A tech startup has developed a unique algorithm that is central to its product. The algorithm is not patented, but the company keeps it confidential. A competitor has independently developed a similar algorithm. Which legal protection is most likely to be challenged?

   • APatent protection
   • BCopyright protection
   • CTrade secret protection
   • DTrademark protection
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A technology company is developing a new product that relies on a proprietary algorithm. The algorithm is a trade secret, and the company has implemented strict access controls. However, a developer accidentally commits the algorithm's source code to a public GitHub repository. The company discovers the leak within an hour. What is the most appropriate immediate response?

   • ADo nothing because the leak was accidental and the company has access controls in place.
   • BFile a patent application immediately to protect the algorithm.
   • CDelete the repository and assume the trade secret is still protected.
   • DContact GitHub to remove the repository and then assess the exposure and potential loss of trade secret protection.
   Reveal Solution Discussion Select an answer first