Webclass 62: Are you up to date on Cyber Security audits and Data Privacy?

Q1. What is the definition of personal data?

Information applicable to one specific person that identifies or clearly refers to them

Correct Incorrect Correct answer

Logs showing how an employee has used the organization's computer system

Correct Incorrect Correct answer

Q2. What is the definition of cybersecurity?

The state of being protected against the criminal or unauthorized use of electronic data, or the measures taken to achieve this

Correct Incorrect Correct answer

The use of firewalls, anti-virus software, VPNs and security certificates to prevent a breach of the company's information systems

Correct Incorrect Correct answer

Q3. What is the most common target of cyberattacks?

Business email accounts

Correct Incorrect Correct answer

Hackers that break into a company's website

Correct Incorrect Correct answer

Q4. What does GDPR stand for?

General Data Protection Regulation

Correct Incorrect Correct answer

Global Data Protection Rules

Correct Incorrect Correct answer

Q5. Under which jurisdiction was GDPR enacted?

Under European law

Correct Incorrect Correct answer

Under US law

Correct Incorrect Correct answer

Q6. In the US, is there centralized legislation for data protection?

No

Correct Incorrect Correct answer

Yes

Correct Incorrect Correct answer

Q7. What is the new risk that could affect data analytics?

Tampering with the data

Correct Incorrect Correct answer

Loss of the data

Correct Incorrect Correct answer

Q8. What does the NIST CyberSecurity Framework cover?

The Identify Function: understanding the risks; The Protect Function: outline the safeguards; The Detect Function: activities to detect occurrence of events; as well as Respond and Recover

Correct Incorrect Correct answer

Two Functions to cover all risks: Respond and Recover that enable an organization to respond to any threats in a timely manner and to Recover from any cyber security events in order to be able to ensure business continuity in the long-term

Correct Incorrect Correct answer

Q9. Why is it important to have documented policies and procedures?

Because otherwise the internal controls will not be enforced in the long-term

Correct Incorrect Correct answer

Because it is necessary for proving to external auditors that there are adequate controls in place

Correct Incorrect Correct answer

Q10. How often, at least, should cybersecurity risk assessments be carried out?

At least annually

Correct Incorrect Correct answer

Whenever there has been a security breach

Correct Incorrect Correct answer

Q11. Who is responsible for the Data Management program?

The data owner, who is usually from the business

Correct Incorrect Correct answer

The CIO (Chief Information Officer)

Correct Incorrect Correct answer

Q12. Why is it important to audit service providers?

Because data breaches often occur through service providers

Correct Incorrect Correct answer

Because service providers are required to have direct access to the entire corporate network

Correct Incorrect Correct answer

Q13. Should systems be set up to apply patches?

Yes because security weaknesses are often mitigated in the patches

Correct Incorrect Correct answer

No because applying patches can cause the system to bug

Correct Incorrect Correct answer

Q14. Is it advised to have Multi-Factor Authentication?

Yes

Correct Incorrect Correct answer

No

Correct Incorrect Correct answer

Q15. How often should access management be reviewed and who should be doing it?

Access management should be reviewed at least quarterly by the business and then checked by audit annually through substantive testing

Correct Incorrect Correct answer

Access management should be reviewed at least annually by internal audit

Correct Incorrect Correct answer

Q16. In SAP, which account is an example of an account that should be disabled or closely monitored because it gives too much access?

SAP_ALL

Correct Incorrect Correct answer

SAP_GUEST

Correct Incorrect Correct answer

Q17. Should data backups be encrypted?

Yes because otherwise a data leak can occur from the backups

Correct Incorrect Correct answer

No because otherwise you might not be able to recover the data if the encryption password is lost in the case of a system error

Correct Incorrect Correct answer

Q18. Who should be trained on Security Awareness?

All of the members of the IT department

Correct Incorrect Correct answer

All members of the organization that have access to the computer systems

Correct Incorrect Correct answer

Q19. What are DNS servers used for in cybersecurity?

Filtering IP addresses in order to block malicious websites

Correct Incorrect Correct answer

Domain Name Servers are used to ensure that the user identify is the correct one when logging in to the system

Correct Incorrect Correct answer

Webclass 62: Are you up to date on Cyber Security audits and Data Privacy?

Webclass 62: Are you up to date on Cyber Security audits and Data Privacy?

admin June 9, 2026

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question