Confidentiality & Data Security Flashcards
7 cards from real CET practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Confidentiality & Data Security flashcards as text
A customer brings in a smartphone for repair and asks the technician not to look at their photos. The technician notices the photos folder is open on screen. The correct response is to:
Answer: Close or navigate away from the photos immediately and avoid further access
Technicians must respect customer privacy by immediately navigating away from personal content encountered accidentally during repair.
Which protocol provides secure, encrypted communication over the internet and is indicated by 'https://' in a browser?
Answer: TLS/SSL
HTTPS uses TLS (Transport Layer Security) or its predecessor SSL to encrypt web communications, protecting data in transit from eavesdropping.
In electronics security, a 'vulnerability' is best described as:
Answer: A weakness in hardware, software, or procedures that could be exploited
A vulnerability is a flaw or weakness that, if exploited, can compromise the confidentiality, integrity, or availability of a system.
An electronics technician discovers that a company's internal network uses WEP for Wi-Fi security. The technician should recommend switching to:
Answer: WPA2 or WPA3
WEP is severely outdated and easily cracked; WPA2 or WPA3 use stronger encryption (AES) and are the current industry standards.
What is the purpose of a digital certificate in securing electronic communications?
Answer: To verify the identity of a party and enable encrypted communication
Digital certificates, issued by Certificate Authorities, authenticate the identity of servers or individuals and facilitate encrypted key exchange.
Under US law, which of the following actions by an electronics technician could constitute a federal crime?
Answer: Accessing stored communications on a customer's device without authorization
The Electronic Communications Privacy Act (ECPA) and Computer Fraud and Abuse Act (CFAA) criminalize unauthorized access to stored electronic communications and computer systems.
What is 'shoulder surfing' in the context of data security?
Answer: Observing someone's screen or keyboard to steal passwords or PINs
Shoulder surfing is a low-tech attack where an attacker physically observes a victim entering sensitive information such as passwords or PINs.