5.3 - Understand Best Practice Security Policies CC Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How does a privacy policy help an organization ensure compliance?

   • ABy requiring users to sign a non-disclosure agreement
   • BBy preventing all data collection activities
   • CBy documenting data handling practices that align with legal and regulatory requirements
   • DBy encrypting all personal data automatically
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A government agency handles sensitive citizen data. The agency is required to retain certain records for a specific period and then securely destroy them. The agency also needs to ensure that data is only accessible to authorized personnel. Which data handling policy elements are most critical to implement?

   • AImplement a privacy policy that informs citizens about data collection practices
   • BDefine data retention schedules and specify secure disposal methods for data that has reached the end of its lifecycle
   • CEstablish a change management process for the database that stores citizen data
   • DRequire all employees to use multi-factor authentication and change passwords quarterly
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A marketing firm allows employees to use their personal smartphones for work email and calendar. The firm wants to ensure that if a device is lost or stolen, the corporate data on it can be protected. They also want to prevent employees from storing sensitive client files on personal cloud storage. Which BYOD policy controls should be implemented?

   • ARequire device registration, enforce remote wipe capability, and prohibit the use of personal cloud storage for corporate data
   • BRequire a strong screen lock PIN and allow employees to use any cloud storage app they prefer
   • CProvide employees with a company-owned device and disable all personal apps
   • DRequire employees to sign an acceptable use policy and use a complex password for their device
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is multi-factor authentication (MFA) often included in a strong password policy?

   • AIt adds an additional layer of security beyond just the password
   • BIt eliminates the need for password complexity rules
   • CIt allows users to share passwords more securely
   • DIt ensures that passwords never expire
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary purpose of a privacy policy?

   • ATo inform users about how their personal data is collected, used, and protected
   • BTo list the software applications approved for employee use
   • CTo define the technical specifications for encrypting data at rest
   • DTo outline the steps for responding to a data breach
   Reveal Solution Discussion Select an answer first