vmartinez

 

Which of the following are core components of security frameworks? Select two answers.

 

• Managing data requests
• Identifying and documenting security goals
• Monitoring and communicating results
• Monitoring personally identifiable information

or

• Establishing regulatory compliance measures
• Implementing security processes
• Setting guidelines to achieve security goals
• Monitoring personally identifiable information

 

 

What are some of the primary purposes of security frameworks? Select three answers.

 

• Protecting PII data
• Managing organizational risks
• Safeguarding specific individuals
• Aligning security with business goals

or

• Protecting PII data
• Managing organizational risks
• Safeguarding specific individuals
• Identifying security weaknesses

 

 

You work for a U.S.-based utility company that suffers a data breach. Several hacktivist groups claim responsibility for the attack. However, there is no evidence to verify their claims. What is the most ethical way to respond to this incident?

 

• Escalate the situation by involving other organizations that have been targeted.
• Improve the company’s defenses to help prevent future attacks.
• Target a specific hacktivist group as a warning to the others.
• Conduct cyberattacks against each hacktivist group that claimed responsibility.

 

 

You receive a text message on your personal device from your manager stating that they cannot access the company’s secured online database. They’re updating the company’s monthly party schedule and need another employee’s birth date right away. Your organization’s policies and procedures state that employee information should never be accessed or shared through personal communication channels. What should you do?

 

• Request identification from your manager to ensure the text message is authentic; then, provide the birth date.
• Respectfully decline, then remind your manager of the organization’s guidelines.
• Give your manager the employee’s birth date; a party is a friendly gesture.
• Ask your manager to provide proof of their inability to access the database.

 

 

Fill in the blank: Privacy protection means safeguarding _____ from unauthorized use.

 

• business networks
• personal information
• documentation
• compliance processes

 

 

An employee trained to handle PII and SPII leaves confidential patient information unlocked in a public area. Which ethical principles does this violate? Select all that apply.

 

• Confidentiality

• Laws

• Privacy protections

• Remaining unbiased