Exam 9: Confidentiality and Privacy Controls

An electronic document that certifies the identity of the owner of a particular public key.

Hjordis Marika took a call from a client."Hjordis,I need to interact online in real time with our affiliate in India,and I want to make sure that our communications aren't intercepted.What do you suggest?" Hjordis responded,"The best solution is to implement

Information encrypted with the creator's private key that is used to authenticate the sender is

One way to circumvent the counterfeiting of public keys is by using

Janus Corporation uses a tool that embeds a code into all of its digital documents.It then scours the internet,searching for codes that it has embedded into its files.When Janus finds an embedded code on the internet,it knows that confidential information has been leaked.Janus then begins identifying how the information was leaked and who was involved with the leak.Janus is using

Asymmetric key encryption combined with the information provided by a certificate authority allows unique identification of

If an organization asks you to disclose your social security number,yet fails to properly dispose of your private information once it has fulfilled its purpose,the organization has likely violated which of the Generally Accepted Privacy Principles?

Identify the item below that is not a step you could take to prevent yourself from becoming a victim of identity theft.

On June 17,2013,a laptop computer belonging to Thea Technologies was stolen from the trunk of Jamie Marcia's car while she was attending a conference.After reporting the theft,Jamie considered the implications for the company's network security and concluded there was little to worry about because

Identify the type of information below that is least likely to be considered "sensitive" by an organization.

Under CAN-SPAM legislation,an organization that receives an opt-out request from an individual has ________ days to implement steps to ensure they do not send out any additional unsolicited e-mail to the individual again.

Data masking is also referred to as

If an organization asks you to disclose your social security number,but decides to use it for a different purpose than the one stated in the organization's privacy policies,the organization has likely violated which of the Generally Accepted Privacy Principles?

Describe some steps you can take to minimize your risk of identity theft.

A process that takes plaintext of any length and transforms it into a short code.

Which systems use the same key to encrypt communications and to decrypt communications?

In developing policies related to personal information about customers,Folding Squid Technologies adhered to the Trust Services framework.The standard applicable to these policies is

Classification of confidential information is the responsibility of whom,according to COBIT5?

Identify the item below which is not a piece of legislation passed to protect individuals against identity theft or to secure individuals' privacy.

Encryption is a necessary part of which information security approach?