Regulatory Frameworks and Compliance Requirements NDE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company that provides online services to children in the U.S. must comply with COPPA. The network defense team is reviewing data collection practices. Which practice aligns with COPPA?

   • AObtain verifiable parental consent before collecting personal information from children
   • BShare children's data with third parties for marketing
   • CCollect as much data as possible to improve services
   • DAllow children to provide personal information without parental involvement
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which regulatory framework is specifically designed to protect cardholder data and ensure secure handling of credit card transactions?

   • AISO 27001
   • BGDPR
   • CFERPA
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A publicly traded company is implementing network access controls and audit trails. Which framework is most likely to require these controls to ensure the integrity of financial reporting?

   • APCI DSS
   • BSOX
   • CHIPAA
   • DGDPR
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital's network team is implementing access controls to comply with HIPAA. Which practice best aligns with the HIPAA Security Rule's requirements for technical safeguards?

   • AUsing a shared generic account for all clinical staff to simplify access management
   • BDisabling all audit logs to reduce storage costs
   • CAllowing all employees to access all patient records to improve efficiency
   • DAssigning unique user IDs and implementing role-based access control for ePHI systems
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A retail company that accepts credit card payments is required to comply with PCI DSS. The network administrator is configuring the firewall to segment the cardholder data environment (CDE) from the rest of the network. Which action best aligns with PCI DSS requirements?

   • APlace the CDE on a separate VLAN with restrictive firewall rules
   • BUse the same network segment but encrypt all traffic
   • CDisable the firewall to avoid interfering with payment processing
   • DAllow all traffic between the CDE and corporate network to simplify management
   Reveal Solution Discussion Select an answer first