Exam 9: Confidentiality and Privacy Controls

Describe the four basic actions that organizations must take to preserve the confidentiality of sensitive information.

Identify one weakness of encryption below.

The Bear Corporation uses a tool that embeds a code into all of its digital documents.It then scours the internet,searching for codes that it has embedded into its files.When Bear finds an embedded code on the internet,it knows that confidential information has been leaked.Bear then begins identifying how the information was leaked and who was involved with the leak.Bear is using

If an organization asks you to disclose your date of birth and your address,but fails to establish any procedures for responding to customer complaints,the organization has likely violated which of the Generally Accepted Privacy Principles?

One way to circumvent the counterfeiting of public keys is by using

Which type of software blocks outgoing messages containing key words or phrases associated with an organization's sensitive data?

It is impossible to encrypt information transmitted over the Internet.

The system and processes used to issue and manage asymmetric keys and digital certificates are known as

Information encrypted with the creator's private key that is used to authenticate the sender is called

Which of the following is not one of the three important factors determining the strength of any encryption system?

Discuss to the key CAN-SPAM's guidelines on commercial e-mail that has the primary purpose of advertising.

If an organization asks you to disclose your social security number,yet fails to properly dispose of your private information once it has fulfilled its purpose,the organization has likely violated which of the Generally Accepted Privacy Principles?

Which of the following is not true regarding virtual private networks (VPN)?

Describe symmetric encryption and identify three limitations.

Explain the controls that organizations can use to protect the privacy of personal information they collect from customers, suppliers, and employees, and discuss how the Generally Accepted Privacy Principles (GAPP) framework provides guidance in developing a comprehensive approach to protecting privacy. -Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information?

Identify the last step in protecting the confidentiality of intellectual property below.

Identify the item below that is not a step you could take to prevent yourself from becoming a victim of identity theft.

Encryption has a remarkably long and varied history.Spies have been using it to convey secret messages ever since there were secret messages to convey.One powerful method of encryption uses random digits.Two documents are prepared with the same random sequence of numbers.The spy is sent out with one and the spy master retains the other.The digits are used as follows.Suppose that the word to be encrypted is SPY and the random digits are 352.Then S becomes V (three letters after S),P becomes U (five letters after P),and Y becomes A (two letters after Y,restarting at A after Z).The spy would encrypt a message and then destroy the document used to encrypt it.This is an early example of

CAN-SPAM provides both criminal and civil penalties for violations of the law.

The creation of a digital signature is a two-step process.