What is a On-premises work environment?

restrict employees to working full-time in a company's physical office

What is a hybrid work environment?

flexible work model that allows employees to work both on-site and remotely

What is a Data processor?

processes personal data on behalf of the controller

What is a Data subject?

the individual who provides personal data to an organization

What is a Data controller?

determines the purposes and means of processing personal data

A company noticed increase in social engineering attacks. What should a team to do help employees identify attackers?

Conducting situational awareness training

Which actions should an organization undergo to involve employees in its defense strategy to mitigate risks? (Select 3)

Enforce two-factor authentication for all company accounts, Implement a system for employees to report detected suspicious emails, Conduct training sessions for employees to recognize phishing attempts

What action would MOST likely reduce the risks associated with data leakage & malware infection through storage devices?

Implementing a strict removable media policy

How can a provider navigate requirements for data retention by respecting patients who request their info be amended?

Complying with mandated regulations

A CPO must ensure services comply with cross-border data transfer regulations under national and international law. Why?

Ensuring adherence to global data transfer frameworks and agreements

What is a Third-party outsourced work environment?

allows for tasks & services at a company facilities or external locations

What approach educates through gamification and allows employees to engage in simulated security scenarios? (Select two)

User guidance and training, Tabletop exercises

What is a Fully remote work environment?

allow for access controls and multifactor authentication not on-site work

What is a Data custodian?

responsible for maintaining and protecting the data

studbud

Review Category Lesson 16: Summarize Data Protection and Compliance Concepts

21 termsStudBud Administration1 play

COMPTIA Sec+ 701

Flashcards21 cardsFPractice quizPHost liveL

Questions 21

Answers

1
What is a On-premises work environment?
allows for tasks & services at a company facilities or external locations
flexible work model that allows employees to work both on-site and remotely
allow for access controls and multifactor authentication not on-site work
restrict employees to working full-time in a company's physical office
2
A CEO has concerns about tangible penalty a company will face due to violating data protection. Why is a CEO concerned?
Reputational damage
Fines
Security infrastructure overhaul
Reporting and monitoring
3
What is a hybrid work environment?
allow for access controls and multifactor authentication not on-site work
restrict employees to working full-time in a company's physical office
flexible work model that allows employees to work both on-site and remotely
allows for tasks & services at a company facilities or external locations
4
Weak & reused password are being used. To mitigate risk of someone outside gaining sensitive info, what should be done?
Upgrading the antivirus software
Increasing the frequency of security audits
Password management
Implementing network segmentation
5
What is a Data processor?
the individual who provides personal data to an organization
determines the purposes and means of processing personal data
responsible for maintaining and protecting the data
processes personal data on behalf of the controller
6
What is a Data subject?
determines the purposes and means of processing personal data
the individual who provides personal data to an organization
responsible for maintaining and protecting the data
processes personal data on behalf of the controller
7
What environment securely allows people access to network resources, regardless of location with strict access control?
Third-party outsourced work environment
On-premises work environment
Fully remote work environment
Hybrid work environment
8
What 2 methods are MOST effective for securing data ensuring data is secure, whether on a server or in a data center?
Obfuscation and segmentation
Tokenization and masking
Encryption and hashing
Permission restrictions and geographic restrictions
9
What is a Data controller?
processes personal data on behalf of the controller
the individual who provides personal data to an organization
responsible for maintaining and protecting the data
determines the purposes and means of processing personal data
10
What is a CCO doing to ensure an organization has taken steps to identify & minimize risks related to data handling?
Attestation and acknowledgment
Due diligence and care
Data encryption strategy
Employee training program
11
A company noticed increase in social engineering attacks. What should a team to do help employees identify attackers?
Updating password policies
Conducting situational awareness training
Completing a data privacy course
Deploying a new firewall
12
Which actions should an organization undergo to involve employees in its defense strategy to mitigate risks? (Select 3)
Deploy a new firewall to inspect incoming email traffic
Enforce two-factor authentication for all company accounts
Implement a system for employees to report detected suspicious emails
Conduct training sessions for employees to recognize phishing attempts
13
What action would MOST likely reduce the risks associated with data leakage & malware infection through storage devices?
Regularly updating the company's firewall settings
Increasing the frequency of employee cybersecurity training
Replacing all Ethernet cables with shielded versions
Implementing a strict removable media policy
14
What practice is central to maintaining a constant awareness of security status & communicating the essential details?
Incident response planning
Reporting and monitoring
Threat intelligence gathering
Log analysis and review
15
How can a provider navigate requirements for data retention by respecting patients who request their info be amended?
Complying with mandated regulations
Establishing a specific data retention policy
Regularly reviewing and updating privacy policies
Maintaining extended data inventory
16
A CPO must ensure services comply with cross-border data transfer regulations under national and international law. Why?
Implementing region-specific data minimization practice for data collection
Updating the corporations firewall configurations for the new cloud service
Auditing physical access controls at data centers to ensure compliance
Ensuring adherence to global data transfer frameworks and agreements
17
What is a Third-party outsourced work environment?
allows for tasks & services at a company facilities or external locations
restrict employees to working full-time in a company's physical office
flexible work model that allows employees to work both on-site and remotely
allow for access controls and multifactor authentication not on-site work
18
CISO must ensure sending data logs to healthcare authorities is in a specific format. What reporting is taking place?
Internal compliance reporting
Data retention policy enforcement
Privacy impact assessment
External compliance reporting
19
What approach educates through gamification and allows employees to engage in simulated security scenarios? (Select two)
Bolster security policies
User guidance and training
Tabletop exercises
Handbooks
20
What is a Fully remote work environment?
allows for tasks & services at a company facilities or external locations
flexible work model that allows employees to work both on-site and remotely
restrict employees to working full-time in a company's physical office
allow for access controls and multifactor authentication not on-site work
21
What is a Data custodian?
responsible for maintaining and protecting the data
the individual who provides personal data to an organization
determines the purposes and means of processing personal data
processes personal data on behalf of the controller

Review Category Lesson 16: Summarize Data Protection and Compliance Concepts Flashcards | StudBud