Tech+ Privacy Quiz: Confidentiality Basics Assessment

1. Session tokens should be invalidated after user logout. True or False?

True

False

2. Which principle ensures that users cannot deny performing an action they completed?

Confidentiality

Availability

Non-repudiation

Integrity

3. Shoulder surfing is a social engineering attack where an attacker observes passwords over someone's shoulder. True or False?

True

False

Submit

5. What is the primary goal of data classification in confidentiality frameworks?

To delete unnecessary files

To categorize data by sensitivity level for appropriate protection

To compress all data equally

To randomize file names

Submit

7. Which of the following is NOT a common method for data anonymization?

Data masking

Tokenization

Plain-text storage

Generalization

8. Two-factor authentication is more secure than single-factor authentication. True or False?

True

False

9. What does PII stand for in the context of data protection?

Private Internet Information

Personally Identifiable Information

Protected Internet Infrastructure

Privacy Improvement Initiative

10. Which regulation primarily governs health data privacy in the United States?

CCPA

HIPAA

SOX

PCI-DSS

11. What is the primary purpose of encryption in protecting personal data?

To compress files for storage

To convert plaintext into unreadable ciphertext

To prevent network latency

To increase download speeds

12. What is the primary risk of using public Wi-Fi networks without a VPN?

Slower internet speed only

Personal data can be intercepted by attackers

Battery drains faster

Device storage fills up

13. Which of the following best describes a zero-trust security model?

Trust all internal network traffic

Verify every user and device regardless of location

Use only passwords for authentication

Disable all firewalls

14. Hashing is primarily used to store passwords securely. True or False?

True

False

15. What is the principle of least privilege in access control?

All users receive the same permissions

Users get only the minimum access needed for their role

Administrators have unrestricted access

Passwords are shared among team members

16. A data breach notification law requires organizations to inform affected users within a specific timeframe. True or False?

True

False

17. Which encryption standard is considered most secure for modern data protection?

DES

MD5

AES-256

ROT13

18. What does GDPR primarily regulate?

Network bandwidth allocation

Personal data collection and processing in the EU

Software licensing agreements

Hardware manufacturing standards

19. Role-Based Access Control (RBAC) restricts user permissions based on what?

User's physical location

User's job function or role

Time of day

Device type used

20. Which of the following is an example of multi-factor authentication (MFA)?

Using only a strong password

Password plus a one-time code from a mobile app

Changing passwords monthly

Using the same password across accounts

Tech+ Privacy Quiz: Can You Protect Personal Data?

1. Session tokens should be invalidated after user logout. True or False?

2.

What first name or nickname would you like us to use?

2. Which principle ensures that users cannot deny performing an action they completed?

3. Shoulder surfing is a social engineering attack where an attacker observes passwords over someone's shoulder. True or False?

4. Certificates used in SSL/TLS encryption are issued by a (CA).

5. What is the primary goal of data classification in confidentiality frameworks?

6. A ______ is a secret string used to verify the identity of a user or system.

7. Which of the following is NOT a common method for data anonymization?

8. Two-factor authentication is more secure than single-factor authentication. True or False?

9. What does PII stand for in the context of data protection?

10. Which regulation primarily governs health data privacy in the United States?

11. What is the primary purpose of encryption in protecting personal data?

12. What is the primary risk of using public Wi-Fi networks without a VPN?

13. Which of the following best describes a zero-trust security model?

14. Hashing is primarily used to store passwords securely. True or False?

15. What is the principle of least privilege in access control?

16. A data breach notification law requires organizations to inform affected users within a specific timeframe. True or False?

17. Which encryption standard is considered most secure for modern data protection?

18. What does GDPR primarily regulate?

19. Role-Based Access Control (RBAC) restricts user permissions based on what?

20. Which of the following is an example of multi-factor authentication (MFA)?

Tech+ Privacy Quiz: Can You Protect Personal Data?

1. Session tokens should be invalidated after user logout. True or False?

2.

What first name or nickname would you like us to use?

2. Which principle ensures that users cannot deny performing an action they completed?

3. Shoulder surfing is a social engineering attack where an attacker observes passwords over someone's shoulder. True or False?

4. Certificates used in SSL/TLS encryption are issued by a ______ ______ (CA).

5. What is the primary goal of data classification in confidentiality frameworks?

6. A ______ is a secret string used to verify the identity of a user or system.

7. Which of the following is NOT a common method for data anonymization?

8. Two-factor authentication is more secure than single-factor authentication. True or False?

9. What does PII stand for in the context of data protection?

10. Which regulation primarily governs health data privacy in the United States?

11. What is the primary purpose of encryption in protecting personal data?

12. What is the primary risk of using public Wi-Fi networks without a VPN?

13. Which of the following best describes a zero-trust security model?

14. Hashing is primarily used to store passwords securely. True or False?

15. What is the principle of least privilege in access control?

16. A data breach notification law requires organizations to inform affected users within a specific timeframe. True or False?

17. Which encryption standard is considered most secure for modern data protection?

18. What does GDPR primarily regulate?

19. Role-Based Access Control (RBAC) restricts user permissions based on what?

20. Which of the following is an example of multi-factor authentication (MFA)?

4. Certificates used in SSL/TLS encryption are issued by a (CA).