Which of these would trigger mandatory breach notification under the PDPA (Amendment) Act 2024?

Temporary access of of unencrypted health data by an unauthorised party.

A DPO receives a report of unusual outbound traffic fr d HR system. Which should be the first step in the response plan?

Activate the incident response team and assess impact.

What flaw exists in a firm's incident response posture if it stores encrypted data and its key on the same server?

Keys stord with encrypted data negate encryption benefits during breaches.

Which situation demonstrates a failure in detection controls rather than response controls?

An attack was discovered weeks after occurring due to lack of monitoring.

Why is logging and monitoring essential for data security under PDPA?

It provides forensic evidence and early warning during data breaches.

In a ransomware attack, CEO resists isolation of affected systems . What should the DPO do to mitigate impact?

Escalate the issue to the board and proceed with isolation

Which of the following best illustrates the concept of a layered security approach in incident prevention?

Combining encryption, access control, MFA, IDS, and

studbud

Data Security & Incident Response—Protect, Detect, Defend!

7 termsStudBud Administration

Module 4

Flashcards7 cardsFPractice quizPHost liveL

Questions 7

Answers

1
Which of these would trigger mandatory breach notification under the PDPA (Amendment) Act 2024?
Temporary access of of unencrypted health data by an unauthorised party.
A physical file of employee contact numbers is misplaced but recovered.
Delay in deleting outdated financial d
A phishing attempt that was blocked by email filters.
2
A DPO receives a report of unusual outbound traffic fr d HR system. Which should be the first step in the response plan?
Report the incident to the media.
Disconnect the HR system from the network.
Activate the incident response team and assess impact.
Notify the affected data subjects.
3
What flaw exists in a firm's incident response posture if it stores encrypted data and its key on the same server?
Decryption keys are irrelevant to data breaches.
The database must be anonymised, not encrypted.
Encryption slows down incident detection
Keys stord with encrypted data negate encryption benefits during breaches.
4
Which situation demonstrates a failure in detection controls rather than response controls?
The organisation lacked a legal advisor for cyber incidents.
The incident response team failed to follow escalation protocols.
An attack was discovered weeks after occurring due to lack of monitoring.
The DPO failed to file a notification within the 72-hour rule.
5
Why is logging and monitoring essential for data security under PDPA?
It helps track how many users are accessing the system daily
It replaces the need for encryption
It is useful mainly for software licensing compliance.
It provides forensic evidence and early warning during data breaches.
6
In a ransomware attack, CEO resists isolation of affected systems . What should the DPO do to mitigate impact?
Comply with the CEO’s instruction.
Escalate the issue to the board and proceed with isolation
Shut down the entire network immediately.
Wait for legal advice before taking action.
7
Which of the following best illustrates the concept of a layered security approach in incident prevention?
Ensuring the DPO manages all cybersecurity tasks alone
Encrypting only sensitive documents.
Combining encryption, access control, MFA, IDS, and
Installing an antivirus and a firewall.

Data Security & Incident Response—Protect, Detect, Defend! Flashcards | StudBud