1.4 - Understand Legal, Regulatory, and Compliance Issues That Pertain to Information Security in a Holistic Context CISSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a common practice that helps an organization maintain compliance with software licensing requirements?

   • AMaintaining an inventory of all software installations and their corresponding licenses
   • BAllowing employees to install any software they need without oversight
   • CDeleting all software after a single use
   • DUsing the same license key for all installations
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A company that operates globally is subject to multiple privacy regulations. Which of the following is a common security implication across GDPR, CCPA, PIPL, and POPIA?

   • AOrganizations must store all personal data within the country where the data subject resides
   • BOrganizations must obtain explicit consent for all data processing activities
   • COrganizations must implement appropriate technical and organizational measures to protect personal data
   • DOrganizations must appoint a Data Protection Officer (DPO) regardless of their size
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A software development firm discovers that a former employee has launched a competing product that replicates the firm's proprietary algorithm for image compression. The algorithm was never published, and the firm took reasonable measures to keep it secret. Which legal protection is most appropriate for the firm to assert?

   • ACopyright infringement, because the algorithm is expressed in code.
   • BTrade secret misappropriation, because the algorithm is secret and has commercial value.
   • CPatent infringement, because the algorithm is a novel process.
   • DTrademark infringement, because the competitor is using a similar product name.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a key privacy principle that should be implemented in an organization's data protection measures?

   • AData retention — keeping personal data indefinitely
   • BData sharing — freely sharing personal data with third parties
   • CData minimization — collecting only the personal data that is necessary for the stated purpose
   • DData maximization — collecting as much data as possible for future use
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A US-based e-commerce company sells products to customers in California and the EU. The company wants to ensure compliance with both CCPA and GDPR. Which practice is required by both regulations?

   • AProviding a privacy notice that discloses the categories of personal data collected and the purposes of processing.
   • BAppointing a Data Protection Officer (DPO) regardless of the company's size.
   • CObtaining explicit opt-in consent before processing any personal data.
   • DProviding a 'Do Not Sell My Personal Information' link on the website.
   Reveal Solution Discussion Select an answer first