Question 1

Which of the following is an international effort to reduce the impact of copyright,trademark, and privacy infringement,especially via the removal of technological copyright protection measures?

Accepted Answer

D

Question 2

Which act requires organizations that retain health care information to use InfoSec mechanisms to protect this information,as well as policies and procedures to maintain them?

Accepted Answer

HIPAA (Health Insurance Portability and Accountability Act) requires organizations that retain health care information to use InfoSec mechanisms and implement policies and procedures to protect the confidentiality, integrity, and availability of electronic protected health information (ePHI).

Question 3

Which act is a collection of statutes that regulates the interception of wire,electronic,and oral communications?

Accepted Answer

The Electronic Communications Privacy Act of 1986 is a collection of statutes that regulates the interception of wire, electronic, and oral communications. It sets limits on how and under what circumstances such communications can be intercepted or disclosed.

Question 4

Which of the following is the study of the rightness or wrongness of intentions and motives as opposed to the rightness or wrongness of the consequences and is also known as duty- or obligation-based ethics?

Accepted Answer

Deontological ethics focuses on the moral duty or obligation to act according to certain rules, principles, or duties, regardless of the consequences. It evaluates the rightness or wrongness of intentions and motives, rather than the outcomes of actions. Applied ethics is the application of ethical theories and principles to specific practical issues or cases, while meta-ethics is the study of the nature, scope, and meaning of ethical language and theories. Normative ethics deals with ethical theories that provide standards or norms for ethical behavior.

Question 5

InfraGard began as a cooperative effortbetween the FBI's Cleveland field office and local intelligence professionals. ___________

Accepted Answer

technology

Question 6

The penalties for offenses related to the National Information Infrastructure Protection Act of 1996 depend on whether the offense is judged to have been committed for one of the following reasons except which of the following?

Accepted Answer

The penalties for offenses related to the National Information Infrastructure Protection Act of 1996 depend on whether the offense is judged to have been committed for purposes of commercial advantage, private financial gain, or in furtherance of a criminal act. The Act does not include political advantage as a reason for committing an offense.

Question 7

Which law addresses privacy and security concerns associated with the electronic transmission of PHI?

Accepted Answer

The Health Information Technology for Economic and Clinical Health (HITECH) Act addresses privacy and security concerns associated with the electronic transmission of protected health information (PHI). It strengthens the privacy and security requirements of the Health Insurance Portability and Accountability Act (HIPAA) by expanding individual rights and imposing new requirements on covered entities and their business associates. The USA Patriot Act of 2001 deals with national security and anti-terrorism efforts, the American Recovery and Reinvestment Act primarily focuses on economic stimulus, and the National Information Infrastructure Protection Act of 1996 pertains to the protection of critical infrastructure in the United States.

Question 8

The Secret Service is charged with the detection and arrest of any person committing a U.S.federal offense relating to computer fraud,as well as false identification crimes.

Accepted Answer

This is a correct statement as per the responsibilities assigned to the Secret Service by the Computer Fraud and Abuse Act (CFAA) and other relevant laws.

Question 9

Ethics carry the sanction of a governing authority.

Accepted Answer

Ethics are moral principles that guide individual behavior and decisions. They are not enforced by a governing authority, but rather are shaped by cultural, social, and personal values. However, some professions do have their own ethical standards and codes of conduct that may have consequences for violations.

Question 10

Due diligence requires that an organization make a valid and ongoing effort to protect others.____________

Accepted Answer

Due diligence is the act of taking reasonable steps to avoid harming others, including protecting them from harm caused by your actions or lack of action. It is an ongoing responsibility for organizations to ensure that they are meeting their duty of care to those they come into contact with.

Question 11

To protect intellectual property and competitive advantage,Congress passed the Entrepreneur Espionage Act (EEA)in 1996. ___________

Accepted Answer

Economic

Question 12

Which law extends protection to intellectual property,which includes words published in electronic formats?

Accepted Answer

The U.S. Copyright Law extends protection to intellectual property, including words published in electronic formats. This law gives the owner of a creative work exclusive rights to control the use and distribution of their work.

Question 13

A signaling lawspecifies a requirement for organizations tonotify affected parties when they have experienced a specified type of loss of information.____________

Accepted Answer

breach

Question 14

ISACA is a professional association with a focus on authorization,control,andsecurity.___________

Accepted Answer

auditing

Question 15

It is the responsibility of InfoSec professionals to understand state laws and standards.____________

Accepted Answer

regulations

Question 16

Which law requires mandatory periodic training in computer security awareness and accepted computer security practice for all employees who are involved with the management,use,or operation of each federal computer system?

Accepted Answer

The Computer Security Act requires mandatory periodic training in computer security awareness and accepted computer security practice for all employees who are involved with the management, use, or operation of each federal computer system.

Question 17

The Gramm-Leach-Bliley (GLB)Act (alsoknown as the Financial Services Modernization Act of 1999)contains a number of provisionsthat affect banks,securities firms,and insurance companies.___________

Accepted Answer

The statement is true. The GLB Act affects financial companies including banks, securities firms, and insurance companies.

Question 18

Information ambiguation occurs when pieces of non-private data are combined to create information that violates privacy._________________________

Accepted Answer

aggregation

Question 19

Which subset of civil law regulates the relationships among individuals and among individuals and organizations?

Accepted Answer

Private law, also known as civil law, regulates the relationships among individuals and organizations. It includes areas such as contract law, property law, and family law. Tort law deals with civil wrongs and personal injury claims, while criminal law pertains to offenses against society as a whole. Public law concerns the relationship between individuals and the government.

Question 20

Deterrence is the best method for preventing an illegal or unethical activity.____________

Accepted Answer

Deterrence theory suggests that individuals are less likely to engage in illegal or unethical activities if they believe that the consequences of these actions are severe and certain. Thus, the threat of punishment can serve as a deterrent to prevent these activities from occurring.

Quiz 2: Compliance: Law and Ethics