Passive Attacks involve some modification of stored or transmitted data or the creation of false data.

Group of answer choices

True

False

A DPIA is may not be required for a processing operation, depending on the results of the privacy threshold analysis.

Group of answer choices

True

False

One of the differences between GDPR and CCPA is that GDPR applies to non-profits, for-profits, and government agencies and CCPA only applies to for-profit businesses.

Group of answer choices

True

False

Which of the following is the document that elaborates on the robustness of various anonymization and de-identification techniques.

Group of answer choices

EU DPWAP 5/2014

WP216

OASIS PRM

HCISSP-12

The five components of privacy engineering are:

Group of answer choices

Security Risk Assessment; Risk Management; Privacy Impact Assessment; Privacy Requirements, Privacy Engineering and Security Objectives

Security Risk Assessment; Risk Management; Business Impact Assessment; Privacy Requirements, Privacy Engineering and Security Objectives

Security Risk Assessments; Risk Management; Privacy Impact Assessment; Privacy Engineering

No answer text provided.

Does U.S. Privacy Act expands the definition of PII to include "any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household"?

Group of answer choices

True

False

Which NIST publication focuses on security and privacy controls for information systems?

Group of answer choices

NIST 800-53

NIST 800-53A

NIST 800-161

NIST 8062

Which of the following is NOT a category for contextual factors of NIST 8062?

Group of answer choices

Threat

Organization

System

Data Action

Privacy Testing includes the following types of testing:

Group of answer choices

Functional

Incident Response

Certification

Accreditation

What is personal data/PII? (Personally Identifiable information)

Group of answer choices

Any data that alone, or in combination with other information, can identify an individual.

Historical information published about a monument.

Any information of an employee.

Information or data that is stored in a vault.