#1
Which of the following is an example of personally identifiable information (PII)?
Favorite color
IP address
Favorite food
Favorite movie
#2
What is the purpose of a VPN (Virtual Private Network)?
To enhance internet speed
To access blocked websites
To securely connect to a private network over the internet
To remove viruses from the network
#3
What is two-factor authentication (2FA)?
A method of authentication using two different passwords
A security measure requiring two forms of identification to access an account
A technique for encrypting data with two encryption keys
A method of securing physical access to a building
#4
What is the purpose of end-to-end encryption?
To encrypt data only during transit
To encrypt data only at rest
To encrypt data from the sender to the recipient, making it inaccessible to anyone else
To encrypt data on the sender's device only
#5
What is the purpose of a privacy notice?
To inform individuals about their privacy rights and how their personal data is processed
To request permission from individuals to collect their personal data
To notify individuals about changes in privacy regulations
To advertise products and services to individuals
#6
What does GDPR stand for in the context of privacy and information security?
General Data Protection Regulation
Global Data Privacy Rules
Government Data Protection Requirement
General Data Privacy Rights
#7
What is the purpose of encryption?
To hide data from unauthorized access
To increase the speed of data transfer
To compress data for storage
To delete data permanently
#8
What is the role of a firewall in information security?
To detect and remove malware from the system
To control incoming and outgoing network traffic
To encrypt sensitive data
To manage user authentication
#9
What is a phishing attack?
A physical break-in to steal data
A social engineering attack to gain sensitive information
A type of malware attack
A method to encrypt files for ransom
#10
What is the purpose of a privacy policy?
To inform users about the company's products and services
To outline the company's financial policies
To disclose how the company collects, uses, and protects user data
To provide instructions for using the company's software
#11
What does the term 'data minimization' refer to in the context of privacy?
Maximizing the amount of data collected from users
Reducing the size of data files for efficient storage
Collecting only the minimum amount of data necessary for a specific purpose
Deleting all data after a certain period
#12
What is a data breach?
An unintentional release of confidential information to an unauthorized person or entity
A deliberate hacking attempt on a system
A system malfunction causing loss of data
A situation where data is securely transferred to a third party
#13
What is a keylogger?
A type of encryption algorithm
A device used for physical security
A tool used to capture keystrokes
A method of secure authentication
#14
What does HIPAA regulate?
Healthcare data privacy
Financial data security
Consumer product safety
Environmental protection
#15
What is the primary purpose of a data breach response plan?
To prevent data breaches from occurring
To identify vulnerabilities in the system
To minimize the impact of a data breach
To recover lost data
#16
What is the principle of least privilege in information security?
Giving users access only to the resources they need to perform their job functions
Granting users unlimited access to all resources
Encrypting all data to restrict access
Implementing multiple layers of security measures
#17
What is a vulnerability assessment?
A process of identifying weaknesses in a system's security
An evaluation of user access permissions
A method of encrypting sensitive data
A procedure for data backup and recovery
#18
What is the difference between data privacy and data security?
Data privacy refers to protecting personal information, while data security refers to protecting data from unauthorized access, alteration, or destruction
Data privacy focuses on protecting data from accidental loss, while data security focuses on preventing intentional data breaches
Data privacy ensures data is accurate and reliable, while data security ensures data is available when needed
There is no difference between data privacy and data security; they are synonymous terms
#19
What does the term 'social engineering' refer to in the context of information security?
A method of securely transferring data over social media platforms
A technique for manipulating people into giving up confidential information
A process of building a social network for cyber defense
A strategy for enhancing social interactions within a company