Computer Networks 1

True or False? Information Technology Infrastructure Library (ITIL) publishes proven, generally accepted practices for IT.

true

What are the six principles of Payment Card Industry Data Security Standard (PCI DSS)?

build and maintain a secure network; protect cardholder data; maintain a vulnerability management program; implement strong access control measures; regularly monitor and test networks; and maintain an information security policy

What is the function of job rotation?

to prevent or reduce fraudulent activity

True or False? The Capability Maturity Model Integration (CMMI) can help improve software development processes.

true

True or False? The Health Insurance Portability and Accountability Act (HIPAA) applies to the past, present, or future health of an individual.

true

What is the purpose of a mandatory vacation?

to reduce fraud and embezzlement

When your bank or credit card company sends you a notification of changes in how it collects or shares data, it is sending that notification in compliance with:

the Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA)

True or False? There is no difference between power of attorney and general power of attorney.

false

True or False? Title I of the Health Insurance Portability and Accountability Act (HIPAA) addresses requirements and standards for information technology.

false

The Family Educational Rights and Privacy Act (FERPA) applies to all of the following, except:

a medical center that hired recent nursing graduates

True or False? The General Data Protection Regulation (GDPR) is a law that regulates how companies protect the personal data of European Union citizens.

true

The Health Insurance Portability and Accountability Act (HIPAA) requires that organizations that handle health information follow standards for the ________________ of that data.

storage, use, and transmission

What is CIPA?

a law designed to limit offensive content from school and library computers

True or False? Some U.S. states have their own attorney general, whereas others do not.

false

True or False? Companies that are affected by regulations and adhere to them are considered to be in compliance.

true

True or False? Due care is a step that fiduciaries are expected to take in order to uphold the trust of the fiduciary relationship.

true

True or False? Control Objectives for Information and Related Technology (COBIT) was designed specifically to help companies comply with the Sarbanes-Oxley Act (SOX).

false

True or False? The Federal Deposit Insurance Corporation (FDIC) was created as a result of the failures that led to the Great Depression.

true

True or False? Only a company can be a fiduciary.

false

True or False? International Organization for Standardization (ISO) 31000 is a set of guidelines and principles used for security management.

false

What are the seven components of Control Objectives for Information and Related Technology (COBIT)?

principles, policies, and frameworks; processes; organizational structures; culture, ethics, and behavior; information; services, infrastructure, and applications; and people, skills, and competencies

True or False? A power of attorney can be given to any individual to grant certain rights.

true

Oscar works for a health insurance company. He is creating a Health Insurance Portability and Accountability Act (HIPAA) compliance plan. In the section on monitoring, what should Oscar specify to be continuously monitored for changes?

regulations and risks

True or False? The Payment Card Industry Data Security Standard (PCI DSS) is a process that must be completed by the time a creditor issues a card to a consumer.

false

What is a publicly traded company?

any company that has stock that outside investors can buy or sell

Which of the following best describes the purpose of the Health Insurance Portability and Accountability Act (HIPAA)?

it helps to protect health information

When the Federal Trade Commission (FTC) was created in 1914, what was its primary goal?

to prevent unfair methods of competition

When compliance is mandated by law, companies often participate in _______, which provide third-party verification that requirements are being met.

external audits

What is not one of the three primary bureaus of the Federal Trade Commission (FTC)?

Bureau of the Census

Which of the following allows one person to act for another for legal issues and sometimes is used if someone becomes mentally incapacitated?

power of attorney