0 of 10 questions completed
Questions:
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
Information
TOTAL QUESTION: 10
TOTAL TIME= 10 MIN
You have already completed the Test before. Hence you can not start it again.
Test is loading...
You must sign in or sign up to start the Test.
You have to finish following quiz, to start this Test:
Your results are here!! for" IT Risk Laws and Regulations "
0 of 10 questions answered correctly
Your time:
Time has elapsed
Your Final Score is : 0
You have attempted : 0
Number of Correct Questions : 0 and scored 0
Number of Incorrect Questions : 0 and Negative marks 0
-
Not categorized
You have attempted: 0
Number of Correct Questions: 0 and scored 0
Number of Incorrect Questions: 0 and Negative marks 0
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- Answered
- Review
-
Question 1 of 10
1. Question
Which OECD guidelines establish principles for managing IT security risks in information systems and networks?
Correct
The OECD Guidelines for the Security of Information Systems and Networks (2002) provide principles for managing IT security risks.
Incorrect
The OECD Guidelines for the Security of Information Systems and Networks (2002) provide principles for managing IT security risks.
Unattempted
The OECD Guidelines for the Security of Information Systems and Networks (2002) provide principles for managing IT security risks.
-
Question 2 of 10
2. Question
Which EU directive established rules for the processing and free movement of personal data?
Correct
Directive 95/46/EC established rules for the processing and free movement of personal data within the EU framework.
Incorrect
Directive 95/46/EC established rules for the processing and free movement of personal data within the EU framework.
Unattempted
Directive 95/46/EC established rules for the processing and free movement of personal data within the EU framework.
-
Question 3 of 10
3. Question
What was the main purpose of Commission Decisions 2001/497/EC and 2004/915/EC?
Correct
These Commission Decisions introduced standard contractual clauses for transferring personal data to non-EU countries.
Incorrect
These Commission Decisions introduced standard contractual clauses for transferring personal data to non-EU countries.
Unattempted
These Commission Decisions introduced standard contractual clauses for transferring personal data to non-EU countries.
-
Question 4 of 10
4. Question
Which EU directive regulates privacy in electronic communications?
Correct
Directive 2002/58/EC, known as the ePrivacy Directive, regulates privacy in electronic communications and protects personal data from unauthorized access and monitoring.
Incorrect
Directive 2002/58/EC, known as the ePrivacy Directive, regulates privacy in electronic communications and protects personal data from unauthorized access and monitoring.
Unattempted
Directive 2002/58/EC, known as the ePrivacy Directive, regulates privacy in electronic communications and protects personal data from unauthorized access and monitoring.
-
Question 5 of 10
5. Question
Which EU directive focuses on identifying and protecting European Critical Infrastructures (ECI)?
Correct
Council Directive 2008/114/EC focuses on identifying and protecting European Critical Infrastructures and includes Operator Security Plans.
Incorrect
Council Directive 2008/114/EC focuses on identifying and protecting European Critical Infrastructures and includes Operator Security Plans.
Unattempted
Council Directive 2008/114/EC focuses on identifying and protecting European Critical Infrastructures and includes Operator Security Plans.
-
Question 6 of 10
6. Question
What was the primary purpose of Directive 2006/24/EC?
Correct
Directive 2006/24/EC required telecom service providers to retain certain data for law enforcement investigations.
Incorrect
Directive 2006/24/EC required telecom service providers to retain certain data for law enforcement investigations.
Unattempted
Directive 2006/24/EC required telecom service providers to retain certain data for law enforcement investigations.
-
Question 7 of 10
7. Question
Which international treaty is regarded as the first international treaty to harmonize cybercrime laws?
Correct
The Council of Europe Convention on Cybercrime, commonly called the Budapest Convention, was adopted in 2001 and aimed to harmonize cybercrime laws.
Incorrect
The Council of Europe Convention on Cybercrime, commonly called the Budapest Convention, was adopted in 2001 and aimed to harmonize cybercrime laws.
Unattempted
The Council of Europe Convention on Cybercrime, commonly called the Budapest Convention, was adopted in 2001 and aimed to harmonize cybercrime laws.
-
Question 8 of 10
8. Question
Which U.S. law grants California residents rights over their personal data?
Correct
The California Consumer Privacy Act (CCPA) grants California residents rights concerning their personal data and includes disclosure and opt-out requirements for covered businesses.
Incorrect
The California Consumer Privacy Act (CCPA) grants California residents rights concerning their personal data and includes disclosure and opt-out requirements for covered businesses.
Unattempted
The California Consumer Privacy Act (CCPA) grants California residents rights concerning their personal data and includes disclosure and opt-out requirements for covered businesses.
-
Question 9 of 10
9. Question
Which U.S. law regulates financial institutions‘ handling of customer data?
Correct
The Gramm-Leach-Bliley Act (GLBA) regulates financial institutions‘ handling of customer information and requires security measures to protect customer data.
Incorrect
The Gramm-Leach-Bliley Act (GLBA) regulates financial institutions‘ handling of customer information and requires security measures to protect customer data.
Unattempted
The Gramm-Leach-Bliley Act (GLBA) regulates financial institutions‘ handling of customer information and requires security measures to protect customer data.
-
Question 10 of 10
10. Question
Which U.S. law establishes data protection requirements for healthcare providers and requires risk assessments for electronic health information?
Correct
HIPAA establishes administrative, technical, and physical safeguards for electronic health information and requires covered organizations to conduct risk assessments.
Incorrect
HIPAA establishes administrative, technical, and physical safeguards for electronic health information and requires covered organizations to conduct risk assessments.
Unattempted
HIPAA establishes administrative, technical, and physical safeguards for electronic health information and requires covered organizations to conduct risk assessments.