CISSP Official Practice Tests by Mike Chapple, David Seidl

Chapter 1 ■ Security and Risk Management (Domain 1) 21

88. Match the following numbered laws or industry standards to their lettered description:

Laws and industry standards

1. GLBA


2. PCI DSS


3. H I PA A


4. SOX

Descriptions

A. A U.S. law that requires covered financial institutions to provide their customers with

a privacy notice on a yearly basis

B. A U.S. law that requires internal controls assessments, including IT transaction flows

for publicly traded companies

C. An industry standard that covers organizations that handle credit cards

D. A U.S. law that provides data privacy and security requirements for medical

information

89. Craig is selecting the site for a new data center and must choose a location somewhere
    within the United States. He obtained the earthquake risk map shown here from the
    United States Geological Survey. Which of the following would be the safest location to
    build his facility if he were primarily concerned with earthquake risk?

(Source: US Geological Survey)

Image reprinted from CISSP (ISC) 2 Certified Information Systems Security Professional Official Study

Guide, 7th Edition © John Wiley & Sons 2015, reprinted with permission.

A. Ne w York

B. North Carolina

C. Indiana

D. Florida