Exam 9: Confidentiality and Privacy Controls

CAN-SPAM applies to both commercial and personal e-mail.

Encryption is not a panacea to protecting confidential information.

A laptop computer belonging to the Novak group was stolen from the trunk of a sales manager's car while she was attending a conference.After reporting the theft,the manager considered the implications for the company's network security and concluded there was little to worry about because

Describe some steps you can take to minimize your risk of identity theft.

Discuss to the key CAN-SPAM's guidelines on commercial e-mail that has the primary purpose of advertising.

Which of the following descriptions is not associated with symmetric encryption?

The system and processes used to issue and manage asymmetric keys and digital certificates are known as

What confidentiality and security risk does using VoIP present to organizations?

After the information that needs to be protected has been identified,what step should be completed next?

Encryption has a remarkably long and varied history.Spies have been using it to convey secret messages ever since there were secret messages to convey.One powerful method of encryption uses random digits.Two documents are prepared with the same random sequence of numbers.The spy is sent out with one and the spy master retains the other.The digits are used as follows.Suppose that the word to be encrypted is SPY and the random digits are 352.Then S becomes V (three letters after S),P becomes U (five letters after P),and Y becomes A (two letters after Y,restarting at A after Z).The spy would encrypt a message and then destroy the document used to encrypt it.This is an early example of

Information encrypted with the creator's private key that is used to authenticate the sender is called

If an organization asks you to disclose your social security number,but fails to tell you about its privacy policies and practices,the organization has likely violated which of the Generally Accepted Privacy Principles?

Which type of software provides an additional layer of protection to sensitive information that is stored in digital format,offering the capability not only to limit access to specific files or documents but also to specify the actions that individuals who are granted access to that resource can perform?

A process that takes plaintext of any length and transforms it into a short code is called

Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?

________ are used to create digital signatures.

Which of the following is not one of the three important factors determining the strength of any encryption system?

CAN-SPAM provides both criminal and civil penalties for violations of the law.

Which systems use the same key to encrypt communications and to decrypt communications?

Asymmetric key encryption combined with the information provided by a certificate authority allows unique identification of