CIPP-US practice questions 81–90

1. Question 81 · 236 in bank

   How did the Fair and Accurate Credit Transactions Act (FACTA) amend the Fair Credit Reporting Act (FCRA)?

   • AIt expanded the definition of “consumer reports” to include communications relating to employee investigations
   • BIt increased the obligation of organizations to dispose of consumer data in ways that prevent unauthorized access
   • CIt stipulated the purpose of obtaining a consumer report can only be for a review of the employee’s credit worthiness
   • DIt required employers to get an employee’s consent in advance of requesting a consumer report for internal investigation purposes

   Show answer

   Answer: B

   Next question

2. Question 82 · 236 in bank

   Which federal act does NOT contain provisions for preempting stricter state laws?

   • AThe CAN-SPAM Act
   • BThe Children’s Online Privacy Protection Act (COPPA)
   • CThe Fair and Accurate Credit Transactions Act (FACTA)
   • DThe Telemarketing Consumer Protection and Fraud Prevention Act

   Show answer

   Answer: D

   Next question

3. Question 83 · 236 in bank

   Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

   • AThe entity must conduct business in the state
   • BThe entity must have employees in the state
   • CThe entity must be registered in the state
   • DThe entity must be an information broker

   Show answer

   Answer: A

   Next question

4. Question 84 · 236 in bank

   What is the most likely reason that states have adopted their own data breach notification laws?

   • AMany states have unique types of businesses that require specific legislation
   • BMany lawmakers believe that federal enforcement of current laws has not been effective
   • CMany types of organizations are not currently subject to federal laws regarding breaches
   • DMany large businesses have intentionally breached the personal information of their customers

   Show answer

   Answer: C

   Next question

5. Question 85 · 236 in bank

   Which federal law or regulation preempts state law?

   • AHealth Insurance Portability and Accountability Act
   • BControlling the Assault of Non-Solicited Pornography and Marketing Act
   • CTelemarketing Sales Rule
   • DElectronic Communications Privacy Act of 1986

   Show answer

   Answer: B

   Next question

6. Question 86 · 236 in bank

   More than half of U.S. states require telemarketers to?

   • AIdentify themselves at the beginning of a call
   • BObtain written consent from potential customers
   • CRegister with the state before conducting business
   • DProvide written contracts for customer transactions

   Show answer

   Answer: C

   Next question

7. Question 87 · 236 in bank

   What does the Massachusetts Personal Information Security Regulation require as it relates to encryption of personal information?

   • AThe encryption of all personal information of Massachusetts residents when all equipment is located in Massachusetts.
   • BThe encryption of all personal information stored in Massachusetts-based companies when all equipment is located in Massachusetts.
   • CThe encryption of personal information stored in Massachusetts-based companies when stored on portable devices.
   • DThe encryption of all personal information of Massachusetts residents when stored on portable devices.

   Show answer

   Answer: D

   Next question

8. Question 88 · 236 in bank

   California’s SB 1386 was the first law of its type in the United States to do what?

   • ARequire commercial entities to disclose a security data breach concerning personal information about the state’s residents
   • BRequire notification of non-California residents of a breach that occurred in California
   • CRequire encryption of sensitive information stored on servers that are Internet connected
   • DRequire state attorney general enforcement of federal regulations against unfair and deceptive trade practices

   Show answer

   Answer: A

   Next question

9. Question 89 · 236 in bank

   Most states with data breach notification laws indicate that notice to affected individuals must be sent in the “most expeditious time possible without unreasonable delay.” By contrast, which of the following states currently imposes a definite limit for notification to affected individuals?

   • AMaine
   • BFlorida
   • CNew York
   • DCalifornia

   Show answer

   Answer: B

   Next question

10. Question 90 · 236 in bank

    Under state breach notification laws, which is NOT typically included in the definition of personal information?

    • AState identification number
    • BFirst and last name
    • CSocial Security number
    • DMedical information

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPP-US practice, question 81. 236 questions available.