1.4 - Understand Legal, Regulatory, and Compliance Issues That Pertain to Information Security in a Holistic Context CISSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of import/export control regulations in the context of information security?

   • ATo prevent the transfer of controlled technology and data to unauthorized countries or entities
   • BTo standardize encryption algorithms across all countries
   • CTo promote international trade by eliminating all restrictions on technology transfer
   • DTo ensure that all software is free of vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 2expert · medium

   A company operating in multiple US states discovers a breach affecting customers in 40 states. The company's legal team is determining notification obligations. Which factor is most critical in determining which state laws apply?

   • AThe state where the breach occurred.
   • BThe state where the data was stored.
   • CThe state where the company is headquartered.
   • DThe state of residence of each affected individual.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An employee at a manufacturing company uses their corporate credentials to access the HR database and exfiltrates salary data, which they sell to a competitor. Which type of cybercrime best describes this activity?

   • ACyber espionage, because the data was sold to a competitor.
   • BInsider threat, because the employee used legitimate credentials to steal data.
   • CIdentity theft, because the employee stole personal data.
   • DRansomware, because the data was held for ransom.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A graphic design agency uses a commercial stock photo library. A designer downloads an image and uses it in a client's marketing campaign without checking the license. The license is for 'editorial use only.' What is the most significant legal risk for the agency?

   • ACopyright infringement, because the image is used beyond the scope of the license.
   • BTrade secret misappropriation, because the image is confidential.
   • CPatent infringement, because the image may depict a patented product.
   • DTrademark infringement, because the image may contain a logo.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a key characteristic of the NIST Cybersecurity Framework (CSF)?

   • AIt is a mandatory regulation for all US federal agencies
   • BIt is a voluntary framework that provides a common language for managing cybersecurity risk
   • CIt is a framework for IT service management
   • DIt is a certification standard for information security management systems
   Reveal Solution Discussion Select an answer first