Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Cryptographic Algorithms > Chapter 1 > Flashcards

Chapter 1 Flashcards

1
Q

What is Cybersecurity

A

Protection of information that is stored, transmitted, and processed in a networked system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Information Security

A

Preservation of CIA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Network Security

A

Protection of networks and their services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the Key Objectives of Cyber Defenders

A
  • Confidentiality
  • Integrity
  • Availability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the Key Objectives of Hackers

A
  • Disclosure
  • Destruction
  • Denial
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Differentiate System Integrity and Data Integrity

A

Data integrity ensures data and programs are changed in a specific and authorized manner while system integrity assures a system performs in an unimpaired way

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Differentiate Authentication and Authorization

A

Authentication confirms while authorization gives permission

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the parts of an OSI Security Architecture

A
  • Security Attack: Any action that compromises security
  • Security Mechanism: process or device that detects, prevents, or recover
  • Security Service: enhances security processing systems, intended to counter security attacks
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Differentiate Peer Entity Authentication and Data Origin Authentication

A

Peer entity authentication provides confidence in the identity of the entities connected while Data Origin Authentication assures that the source of data is as claimed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the GDPR

A

The General Data Protection Regulation of the EU aims to protect the personal data and privacy of EU residents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the scope of the GDPR

A

Companies and organizations that process the data of EU residents (international and local)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Lawfulness, Fairness, and Transparency

A

Data must be processed as such and individuals must be informed about how their data is used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Purpose Limitation

A

Personal data must be collected for specified, explicit, and legitimate purposes only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Data Minimization

A

Only collect and process data that is necessary for the intended purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Accuracy

A

Personal data must be accurate and kept up to date with efforts to correct inaccuracies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Integrity and Confidentiality

A

Data must be processed securely

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Storage Limitation

A

Data should be kept no longer than necessary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Accountability

A

Organizations are responsible in following the GDPR and implement appropriate measures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Who are the Key Entities Affected by the GDPR

A

Controllers and Processors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the Rights Enforced by the GDPR

A
  • Right to Access
  • Right to Rectification
  • Right to Erasure (forgotten)
  • Right to Restrict Processing
  • Right to Data Portability
  • Right to Object (reject)
  • Rights Related to Automated Decision-Making: Challenge solely automated decisions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Right to Access

A

Individuals can request access to their personal data from an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Right to Rectification

A

Individuals can request the correction of inaccurate or incomplete data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Right to Erasure

A

Individuals can request the deletion of their personal data under certain conditions

24
Q

What is Right to Restrict Processing

A

Individuals can limit the way personal data is processed

25
What is Right to Data Portability
Individuals can request their data in a structured, company-used, and machine-readable format
26
What is Right to Object
Individuals can object to certain types of processing
27
What is Rights Related to Automated Decision-Making
Individuals can challenge decisions made solely by automated processes that have significant effects on them
28
What are the GDPR's Lawful Bases for Data Processing?
- Consent - Contractual Necessity - Legal Obligation - Vital Interests - Public Interest - Legitimate Interests
29
What is Consent
Explicit permission from the individual to process their data
30
What is Contractual Necessity
Processing necessary to fulfil a contract with an individual
31
What is Legal Obligation
Processing required to comply with a legal requirement
32
What are Vital Interests
Processing necessary to protect someone's life or health
33
What is Public Interest
Processing in the public interest or authority
34
What are Legitimate Interests
Pursuing Legitimate interests of the controller unless overridden by individual rights
35
What are the Responsibilities of Organizations
- Appoint a DPO if they process large volumes of data - Maintain ROPA to mention how data is processed and protected - Conduct DPIAs to evaluate the risks of data processing - Provide Transparency to for data usage clarification - Ensure Vendor Compliance to hold third-party processors accountable
36
What does DPO Stand for?
Data Protection Officer
37
What does ROPA Stand for?
Records of Processing Activities
38
What does DPIA Stand for?
Data Protection Impact Assessments
39
What is GDPR's Fine for Non-Compliance
- 20 mil Euros or 4% of company's annual turnover (whichever's bigger) - lesser instances are 10 mil Euros or 2% of company's annual turnover (whichever's bigger)
40
What is Personal Data?
Any Information that can identify an individual
41
What is Sensitive Data?
Special, more sensitive personal data
42
What is a Data Breach Notification
DPA breach notification within 75 hours that alerts affected individuals
43
What are the Practical Compliance Steps
- Assess personal data your organization collects and processes - Ensure you have a lawful basis for collecting data - Create and publish a GDPR-compliant privacy notice - Implement robust security measures to protect data - Train employees on GDPR principles and responsibilities - Regularly review and update data protection policies and practices
44
What is the CCPA
A Californian privacy law that provides individuals with greater control over their personal information
45
Where does the CCPA Apply to?
At least one must be met: - Annual gross revenue is over $25 mil - Buy, receive, or sell the information of 50,000 or more Californian individuals, households, or devices annually - Derive 50% of annual revenue from selling Californian personal information
46
According to the CCPA, what is Considered Personal Information?
Any data that identifies, relates, or can be reasonably linked to a specific individual or household
47
What are the Consumer Rights Under CCPA
- Right to know - Right to Delete - Right to Opt-Out - Right to Non-Discrimination
48
What are the Business Obligations Under CCPA
- Provide a clear and accessible privacy policy - Offer a "do not sell my personal information" link - Respond to verified customer requests regarding personal information - Take reasonable measures to secure personal data
49
What are the Penalties for CCPA Non-Compliance?
- $7,500 fine per intentional violation - $2,500 fine per unintentional violation - Customers can sue businesses in certain data breaches with $100 to 750 per customer per incident
50
Differentiate CCPA and GDPR
- Jurisdiction: CCPA - EU, GDPR - California - Scope: CCPA - consumer rights and data sales, GDPR - broader, covering all personal data processing - Legal Basis: CCPA - more on transparency and consumer rights, GDPR - lawful basis for data processing
51
What is ISO 27001
International standard for Information Security Management Systems (ISMS) that enforces CIA
52
What makes ISO 27001 Different from CCPA and GDPR
- ISO is more on information security systems - ISO is voluntary - ISO is more globally applicable
53
Differentiate Privacy by Design and Privacy by Default
Privacy by design incorporates privacy into the design of systems from the start while privacy by default ensures strictest privacy settings are automatically applied without user intervention
54
What are the Seven Foundational Principles of Privacy by Design
- Proactive, not reactive; preventative, not remedial - Privacy Embedded into design - Full Functionality - positive-sum, not zero-sum
55

Cryptographic Algorithms (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions