3.2 Designing for Compliance PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a primary requirement of COPPA for operators of online services directed to children?

   • AThey must encrypt all data with a minimum of 256-bit encryption
   • BThey must obtain verifiable parental consent before collecting personal information from children
   • CThey must delete all user data every 24 hours
   • DThey must allow children to access all features without any restrictions
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of Personally Identifiable Information (PII)?

   • AThe color of a product
   • BThe number of visitors to a website
   • CA company's public stock ticker symbol
   • DA user's full name and email address
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary significance of a SOC 2 report for a cloud provider?

   • AIt certifies that the provider is compliant with HIPAA
   • BIt is a legal requirement for all cloud providers
   • CIt demonstrates that the provider has controls in place to protect customer data based on trust service criteria
   • DIt guarantees that the provider will never experience a data breach
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the context of data protection, which party determines the purposes and means of processing personal data?

   • AData protection officer
   • BData controller
   • CData processor
   • DData subject
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which regulation is specifically designed to protect the privacy and security of patients' health information in the United States?

   • ACOPPA
   • BPCI DSS
   • CGDPR
   • DHIPAA
   Reveal Solution Discussion Select an answer first