INFORMATION SECURITY

6. Which of the following is not a principle under PCI DSS?

a. Regularly monitor and test networks.

b. Maintain an information security policy.

c. Maintain an ethics board.

d. Protect cardholder data.

7. True or False. Regularly monitoring and testing physical security is one of the six goals of PCI DSS:

a. True

b. False

8. A company located in the United States may be subject to the rules and regulations of the European Union General Data Protection Regulation.

a. True

b.False

9. All cybersecurity frameworks address the same concerns.

a. True

b. False

10. Under the Family Education Rights and Privacy Act (FERPA), schools may disclose records, without consent, in the following conditions, except:

a. Other schools to which a student has attended in the past.

b. Accrediting organizations.

c. Appropriate officials in cases of health and safety emergencies.

d. To comply with a judicial order or lawfully issued subpoena.