Data Protection and Cloud Computing Quiz

Which of the Trust Services principles must be included in a Service Organization Controls (SOC) 2 audit?

• Security

• Privacy

• Availability

• Confidentiality

Intellectual property (IP) protected under a non-disclosure agreement (NDA) is classified as which type of private data?

• Personally Identifiable Information (PII)

• Protected Health Information (PHI)

• Payment Data

• Contractual Private Data

Communication, Consent, Control, Transparency, and Independent and yearly audits are the five key principles found in what standard that cloud providers should adhere to?

• ISO/ 27018

• Generally Accepted Privacy Principles (GAPP)

• ISO 27001

• ISO 27037

The European Union's (EU) General Data Protection Regulation (GDPR) has strict requirements for where the personal data of natural persons that are collected from within EU can be stored. Which jurisdiction can the data be stored in outside of Europe?

• Taiwan

• Brazil

• USA

• Isle of Man

Organizations are looking for guidance on how to meet business objectives while also managing and minimizing the risks that come with implementing cloud computing solutions. Which of the following would be the most helpful?

• Open Web Application Security Project (OWASP)

• Cloud Security Alliance (CSA)

• Internet Assigned Numbers Authority (IANA)

• Institute of Electrical and Electronics Engineers (IEEE)

Which major piece of legislation focuses on the security controls and confidentiality of medical records?

• Health Information Portability and Accountability Act (HIPAA)

• GDPR

• Sarbanes Oxley

• PIPEDA

The main goal of the European Union's (EU) General Data Protection Regulation (GDPR) is to ensure that individuals' personal data is protected for/from . . .

• Confidentiality purposes

• Availability Purpose

• Repudiation Purpose

• Communication Purpose

Companies uses ISO 27001 in order to implement/certify:

• Audit systems

• Information Security Management System

• Data Handling practices

• eDiscovery

An organization is concerned about which regulations might affect how long they need to retain or store financial and accounting data. Which of the following regulations does the organization needs to be aware of to address the organization's concerns?

• GDPR

• Sarbanes-Oxley Act (SOX)

• HIPAA

• PIPEDA

From a legal perspective, what is the MAIN factor that differentiates a cloud environment from a traditional data center?

• Multi tenancy

• Self service

• Rapid Elasticity

• Resource Pooling