QUESTION 25 If an organization asks you to disclose your social security number, but decides to use it for a different purpose than the one stated in the organization's privacy policies, the organization has likely violated which of the Generally Accepted Privacy Principles? O Security Quality Access Collection QUESTION 26 A process that takes plaintext of any length and transforms it into a short code is called symmetric encryption O asymmetric encryption hashing encryption QUESTION 27 Which of the following is not one of the three fundamental information security concepts? The time-based model of security focuses on the relationship between preventive detective and corrective controls The idea of defense-in-depth employs multiple layers of controls Security is a management issue, not a technology issue Information security is a technology issue based on prevention