6.1 Identify the Impact of Laws and Regulations That Relate to Information Security ISSMP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which type of intellectual property law protects original works of authorship, such as software code and documentation?

   • ATrade secret law
   • BPatent law
   • CTrademark law
   • DCopyright law
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A U.S. organization that provides online services to children under 13 is subject to the Children's Online Privacy Protection Act (COPPA). The organization is designing a new mobile app for children. Which of the following is a primary compliance requirement under COPPA for the app?

   • AProvide a privacy policy that is written in simple language and posted on the app's website.
   • BEncrypt all data collected from children at rest and in transit.
   • CObtain verifiable parental consent before collecting personal information from children.
   • DAppoint a Children's Privacy Officer to oversee compliance.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A software company discovers that a former employee has copied proprietary source code and is using it to develop a competing product. The source code is not publicly disclosed and the company has taken reasonable measures to keep it secret. Which type of intellectual property protection is most directly applicable to this situation?

   • ATrade secret protection
   • BCopyright protection
   • CTrademark protection
   • DPatent protection
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An organization processes credit card payments. Which of the following standards is most directly applicable to its information security operations?

   • AISO/IEC 27001
   • BGDPR
   • CCOBIT
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A technology company is developing a new product that includes a proprietary algorithm. The company is considering whether to patent the algorithm or keep it as a trade secret. The algorithm is expected to be reverse-engineered easily if the product is sold publicly. Which of the following is the most appropriate intellectual property strategy?

   • AKeep the algorithm as a trade secret and rely on confidentiality agreements with customers.
   • BFile for a patent to protect the algorithm, as trade secret protection would be lost if the algorithm is reverse-engineered.
   • CRely on trademark protection for the product name, which also protects the algorithm.
   • DUse copyright protection for the algorithm's source code, which prevents reverse engineering.
   Reveal Solution Discussion Select an answer first