Exam 9: Confidentiality and Privacy Controls

Text that was transformed into unreadable gibberish using encryption is called

If an organization asks you to disclose your date of birth and your address,but refuses to let you review or correct the information you provided,the organization has likely violated which of the Generally Accepted Privacy Principles?

Under CAN-SPAM legislation,an organization that receives an opt-out request from an individual has ________ days to implement steps to ensure they do not send out any additional unsolicited e-mail to the individual again.

In a private key system the sender and the receiver have ________,and in the public key system they have ________.

If an organization asks you to disclose your social security number,but decides to use it for a different purpose than the one stated in the organization's privacy policies,the organization has likely violated which of the Generally Accepted Privacy Principles?

The Bear Corporation uses a tool that embeds a code into all of its digital documents.It then scours the internet,searching for codes that it has embedded into its files.When Bear finds an embedded code on the internet,it knows that confidential information has been leaked.Bear then begins identifying how the information was leaked and who was involved with the leak.Bear is using

A client approached Paxton Uffe and said,"Paxton,I need for my customers to make payments online using credit cards,but I want to make sure that the credit card data isn't intercepted.What do you suggest?" Paxton responded,"The most effective solution is to implement

Describe the four basic actions that organizations must take to preserve the confidentiality of sensitive information.

If an organization asks you to disclose your social security number,but fails to establish a set of procedures and policies for protecting your privacy,the organization has likely violated which of the Generally Accepted Privacy Principles?

Compare the advantages and disadvantage of symmetric and asymmetric encryption.

Identify the item below that is not a step you could take to prevent yourself from becoming a victim of identity theft.

All of the following are associated with asymmetric encryption except

If an organization asks you to disclose your date of birth and your address,but fails to establish any procedures for responding to customer complaints,the organization has likely violated which of the Generally Accepted Privacy Principles?

One way to circumvent the counterfeiting of public keys is by using

An electronic document that certifies the identity of the owner of a particular public key.

Cindy Vindoolo logged on to her e-mail account to find that she had received 50 e-mails from a company called LifeCo that promised her extreme weight loss if she bought their diet pills.Cindy angrily deleted all 50 e-mails,realizing she was a victim of

If an organization asks you to disclose your social security number,yet fails to permit you to opt-out before you provide the information,the organization has likely violated which of the Generally Accepted Privacy Principles?

Information rights management software can do all of the following except

Encryption is one of the many ways to protect information in transit over the internet.

Classification of confidential information is the responsibility of whom,according to COBIT5?