Data Privacy and Security Flashcards
7 cards from real General practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Privacy and Security flashcards as text
What does the term 'data minimization' mean in the context of privacy?
Answer: Collecting only the data necessary for a specific purpose
Data minimization is a privacy principle requiring organizations to collect only the minimum personal data needed to fulfill a stated purpose.
Which attack type involves an attacker intercepting communication between two parties without their knowledge?
Answer: Man-in-the-middle (MITM) attack
A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters communications between two parties who believe they are communicating directly.
What is a 'privacy impact assessment' (PIA)?
Answer: A process for identifying and mitigating privacy risks before launching a project
A Privacy Impact Assessment (PIA) is a process organizations use to identify, evaluate, and mitigate privacy risks associated with new projects or data processing activities.
Which of the following best describes 'two-factor authentication' (2FA)?
Answer: Requiring two separate forms of identity verification to access an account
Two-factor authentication requires users to provide two distinct types of credentials—such as a password and a one-time code—to verify their identity.
Under the Children's Online Privacy Protection Act (COPPA), what age threshold requires parental consent for data collection?
Answer: Under 13
COPPA requires websites and online services to obtain verifiable parental consent before collecting personal information from children under 13.
What is 'shoulder surfing' in the context of data security?
Answer: Physically observing someone's screen or keyboard to steal information
Shoulder surfing is a low-tech attack where someone directly observes a person entering sensitive information such as PINs or passwords.
What does 'data portability' allow individuals to do?
Answer: Receive and transfer their personal data to another service provider
Data portability gives individuals the right to receive their personal data in a usable format and transfer it to another controller or service.