Practice questions

Let’s try to practice the material in this chapter with a few example questions.

Questions

1. Data4U, a Software as a Service (SaaS) company, would like to create a small dataset that includes de-identified data about how their clients have improved with the use of their software. They want every sales representative in the company to have access to this data to show to potential clients. What form of access requirement is this?
   1. User group-based
   2. Encryption-based
   3. Role-based
   4. Transmission-based
2. Which part of the Data Use Agreement includes explicit details about how the data is not supposed to be used?
   1. Acceptable use policy
   2. Data processing
   3. Data deletion
   4. Data retention
3. If you suspect that a data breach has occurred, which of the following is an appropriate response?
   1. Delete the data
   2. Ignore it
   3. Inform the impacted parties
   4. Do nothing
4. Which of the following variables would be considered PII?
   1. Geolocation
   2. Social media post
   3. Social Security number
   4. All of the above
...