A multinational corporation is updating its security policies to comply with both GDPR and the California Consumer Privacy Act (CCPA). The policy team has drafted a unified data protection policy. However, the legal department notes that GDPR and CCPA have different definitions of personal information and different rights for individuals. What is the best approach to reconcile these conflicting requirements?

Use a single policy that only includes the common elements of both regulations

Adopt the stricter of the two regulations for all data subjects globally

Ignore CCPA and only comply with GDPR because it is more comprehensive

Create separate policies for EU and California data subjects, each tailored to the respective regulation

A multinational company processes personal data of EU citizens and must comply with GDPR. The security team is updating policies to ensure that data transfers outside the EU are lawful. What should the policies address?

The legal bases and safeguards for international data transfers

The requirement to store all data on-premises in the EU

The prohibition of all data transfers outside the EU

The encryption of all data at rest and in transit

In security governance, which activity is primarily responsible for ensuring that security investments and controls align with business objectives?

Strategic planning and oversight

How do compliance requirements typically affect security governance?

They eliminate the need for risk management

They have no effect on governance

They force the organization to adopt specific security controls and policies

They only affect the IT department, not governance

EC-CouncilNetwork Defense Essentials

Domain 2Objective 2

Security Policies and Governance NDE Practice Questions (Page 10)

Part of the Administrative and Physical Security Controls domain, which makes up ~15% of our current practice bank.

49questions here

10free pages

6concepts

Questions 46–49

46expert · hard
A multinational corporation is updating its security policies to comply with both GDPR and the California Consumer Privacy Act (CCPA). The policy team has drafted a unified data protection policy. However, the legal department notes that GDPR and CCPA have different definitions of personal information and different rights for individuals. What is the best approach to reconcile these conflicting requirements?
Select an answer first
47application · medium
A multinational company processes personal data of EU citizens and must comply with GDPR. The security team is updating policies to ensure that data transfers outside the EU are lawful. What should the policies address?
Select an answer first
48foundation · easy
In security governance, which activity is primarily responsible for ensuring that security investments and controls align with business objectives?
Select an answer first
49foundation · easy
How do compliance requirements typically affect security governance?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Security Policies and Governance NDE Practice Questions (Page 10)

Questions 46–49

A multinational company processes personal data of EU citizens and must comply with GDPR. The security team is updating policies to ensure that data transfers outside the EU are lawful. What should the policies address?

In security governance, which activity is primarily responsible for ensuring that security investments and controls align with business objectives?

How do compliance requirements typically affect security governance?

Keep studying — Administrative and Physical Security Controls