Data Privacy Fundamentals Cognitive Class Exam Quiz Answers

Clear My Certification January 12, 2024 Cognitive Class Leave a comment 143 Views

Enroll Here: Data Privacy Fundamentals Cognitive Class Exam Quiz Answers

Data Privacy Fundamentals Cognitive Class Certification Answers

Module 1 – Students Loans Data Breach (Canada) Quiz Answers – Cognitive Class

Question 1: What does PIPEDA stand for?

Personal Incidents of Privacy for Electronic Documents Act
Personal Information Protection and Electronic Documents Act
Privacy Information of Protections of Electronic Documents Act
Privacy Institute of Protections of Electronic Documents Act
Privacy Initiative for Protection of Electronic Data Act

Question 2: Which data privacy federal law does the case study incident fall under in Canada?

The Private Citizens Act
The Privacy Act
The Personal Information Protection and Electronic Data Act (PIPEDA)
The Personal Information Protection and Electronic Documents Act (PIPEDA)
The Personal Internet Protection and Electronic Documents Act (PIPEDA)

Question 3: In the case study, why did the ESDC’s Canada Student Loans Program (CSLP) employee make a backup copy of the program information stored in the central computer?

He/she knew someone in the data set and wanted to see the value of their loans
To sell the data on the dark web
To view the data at home
To keep the data for personal use after he/she resigned from the organization
To protect against an accidental loss or deletion of the files during a data migration

Module 2 – Target Corp (USA) Quiz Answers – Cognitive Class

Question 1: Under The Personal Information Protection and Electronic Documents Act, PIPEDA, is credit card information considered ‘personal information’?

False
True

Question 2: Are bricks and mortar physical stores covered under the Personal Information Protection and Electronic Documents Act, PIPEDA?

False
True

Question 3: Is an online commercial business that sells jewelry online and has a maximum of 99 employees covered under the Personal Information Protection and Electronic Documents Act, PIPEDA?

False
True

Module 3 – Think W3 (UK) Quiz Answers – Cognitive Class

Question 1: According to General Business Law § 899-aa in the Doritex Corp. case, when should a company notify affected individuals and various government agencies of a data breach?

In the most expedient time possible
Within 7 days of the breach
Within 5 business days of the breach
Within 30 days of the breach
At the end of the financial year

Question 2: Which of the 8 data protection principles did Think W3 UK infringe in the Case Study?

First Principle – Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless at least one of the conditions in Schedule 2 is met and in the case of sensitive personal data, at least one of the conditions set out in Schedule 3 or either of the two Statutory Instruments below is met.
Third principle – Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
Fourth principle – Personal data shall be accurate and, where necessary, kept up to date.
Seventh principle – Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
Eighth principle – Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data
subjects in relation to the processing of personal data.

Question 3: Which of the following statements is one of the 7 guiding principles of Privacy by Design?

The 80/20 Rule, 20% of the team see 80% of the data
Data access by pay grade
Soft copy before hard copy
Reduce waste
Proactive not reactive

Module 4 – Home Depot (USA) Quiz Answers – Cognitive Class

Question 1: Hackers deployed custom-built malware on which Home Depot system?

Alarm system
Surveillance system
Self-checkout system
Loyalty card system
Company Intranet

Question 2: What can companies do to prevent hacks?

Limit the number of password attempts in a short period
Increase the number of users on the platform
Pay lawyers to litigate any attempts at hacking
Host the apps and websites on international servers
Encourage employees to save their passwords in a ‘Passwords’ folder on the company network

Question 3: From what you learnt in the ‘Tips for strong passwords’ section, which of these is considered a strong password?

123123
Passw0rd1
N3wG.UUnniiV3r5iiTeeG.yyorK
QWERTY
Mohammed123

Question 4: How did hackers access the Home Depot network?

A vendor’s username and password
A vendor’s USB stick
An open wifi network
A card cloning machine
A vendor’s mobile phone

Module 5 – Privacy Tips Quiz Answers – Cognitive Class

Question 1: Which of these is on the list of ‘worst password ideas?

Medical procedures
Another family member’s name
Made up words
Phrase combinations
Phrases in another language

Question 2: In the ’10 Privacy Tips of Companies’ list, on completion of projects, all materials relating to a project should be deleted, __________________

including backups.
excluding backups.

Data Privacy Fundamentals Final Exam Answers – Cognitive Class

Question 1: Why did OneStopParking put off the website update?

Because the update broke portions of the website
Because the website was programmed to do automatic updates
Because no one received the notification about an update
Because the web administrator was on maternity leave
Because no one knew how to do the update

Question 2: OneStopParking was able to determine exactly which customers were affected by the breach:

True
False

Question 3: How many days after OneStopParking learned about the breach did they remedy the situation?

6 days
21 days
15 days
17 days
3 days

The ‘Justin’ Case Study – Multiple Choice Answers

Question 4: Based on what you have learnt in this course, which of the following options is a good Privacy by Design feature in a database system?

the database system auto saves passwords in the browser
the database system allows multiple attempts after an incorrect password entry
the database system include historical personal customer data that no one uses
the database system prompts administrators to change the password regularly
the database system lets administrators recycle passwords

The ‘Justin’ Case Study – Multiple Choice Answers

Question 5: The company privacy policy clearly states that password problems of this nature should be reported to the IT Director immediately. Should you help Justin with his password problem?

Yes – The request seems reasonable as long as you guess the correct password in under 5 attempts.
No – The request seems unethical and you should advise Justin to report his password problem.
No – The request seems unethical and you should not get involved.
No – The request seems unethical and you should report Justin for his irresponsible password practices.
Yes – You have the skills to help Justin with his password problem, you should offer your assistance without question.

Introduction to Data Privacy Fundamentals

Data privacy is a critical aspect of handling and managing personal information responsibly. It involves protecting individuals’ sensitive information from unauthorized access, use, disclosure, alteration, and destruction. Here are some fundamental principles and concepts related to data privacy:

1. Data Minimization:

Collect only the minimum amount of personal data necessary for the intended purpose. Avoid unnecessary collection and storage of sensitive information.

2. Purpose Limitation:

Clearly define the purpose for which personal data is being collected and inform individuals about it. Do not use the data for purposes unrelated to the original intent without obtaining consent.

3. Consent:

Obtain explicit and informed consent from individuals before collecting, processing, or sharing their personal information. Clearly communicate the scope and purpose of data usage.

4. Data Security:

Implement robust security measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. This includes encryption, access controls, and regular security audits.

5. Data Accuracy:

Ensure that personal data is accurate and up-to-date. Take measures to rectify inaccuracies promptly when identified.

6. Transparency:

Be transparent about data practices by providing clear and easily accessible privacy policies. Inform individuals about how their data is being used, who has access to it, and how long it will be retained.

7. Data Subject Rights:

Respect the rights of data subjects, including the right to access, rectify, erase, and port their personal data. Establish mechanisms for individuals to exercise these rights.

8. Data Retention:

Establish clear policies for the retention and deletion of personal data. Do not retain data for longer than necessary for the intended purpose.

9. Data Protection Impact Assessment (DPIA):

Conduct DPIAs for high-risk processing activities that involve the systematic and extensive evaluation of personal aspects. Assess and mitigate potential privacy risks.

10. Cross-Border Data Transfer:

When transferring personal data across borders, comply with applicable data protection laws and regulations. Implement safeguards such as Standard Contractual Clauses (SCCs) or obtain explicit consent.

11. Data Breach Response:

Develop and implement a data breach response plan to detect, respond to, and mitigate the impact of security incidents promptly. Comply with legal obligations to notify affected individuals and authorities.

12. Privacy by Design and Default:

Integrate privacy considerations into the design and development of systems, products, and services from the outset. Default settings should prioritize privacy.

13. Employee Training:

Educate employees on data privacy policies and practices. Foster a culture of awareness and responsibility regarding the handling of personal information.

14. Regulatory Compliance:

Stay informed about and comply with relevant data protection laws and regulations, such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and others applicable to your jurisdiction.

15. Third-Party Data Processors:

Ensure that third-party service providers and data processors adhere to the same privacy standards and security measures. Implement contractual agreements that define data protection responsibilities.

By incorporating these fundamental principles into organizational practices and policies, businesses and entities can establish a strong foundation for protecting individuals’ privacy and complying with data protection laws. Keep in mind that data privacy is an evolving field, and staying informed about changes in regulations and best practices is crucial.