Explain Data Privacy Concerns Related to Storage and Transmission of Data 350-901 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which type of data is specifically protected under the Health Insurance Portability and Accountability Act (HIPAA)?

   • AProtected Health Information (PHI)
   • BPayment Card Industry (PCI) data
   • CIntellectual property (IP)
   • DPersonally Identifiable Information (PII)
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which regulatory framework requires organizations that handle cardholder data to implement specific security controls?

   • ACCPA
   • BHIPAA
   • CPCI DSS
   • DGDPR
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security architect is designing a system that stores and transmits sensitive customer data. The system must ensure that data is not disclosed to unauthorized parties and that it is not altered during transmission. The architect is considering various controls. Which control addresses both confidentiality and integrity?

   • AUsing a checksum to verify data integrity.
   • BEncrypting the data with TLS during transmission.
   • CUsing a firewall to restrict network access to the data.
   • DImplementing role-based access control on the database.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company needs to share a dataset with a third-party analytics firm for research purposes. The dataset contains customer purchase history but must not include any personally identifiable information (PII). The company wants to maintain the statistical usefulness of the data. Which technique should they use?

   • AEncrypt the entire dataset and share the decryption key with the analytics firm.
   • BAnonymize the data by removing direct identifiers and applying k-anonymity.
   • CTokenize the customer IDs and names, but keep the purchase history unchanged.
   • DRemove all customer IDs and names, but keep the purchase history with dates and locations.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A startup is developing a fitness tracking app that collects users' health data, including heart rate and sleep patterns. The app will be sold in the EU and the US. The founders want to minimize privacy risks and comply with GDPR. They are deciding what data to collect and how to handle it. Which approach best aligns with privacy by design?

   • AStore all data in the EU and do not allow access from outside the EU.
   • BCollect only the data necessary for the app's core features and implement user controls to access and delete their data.
   • CAnonymize all health data before storing it, but do not provide users with access to their data.
   • DCollect all available health data to enable future features and rely on user consent.
   Reveal Solution Discussion Select an answer first