Cybersecurity Legislation and Standards Quiz

Which legislation aims to improve the accuracy and reliability of corporate disclosures and financial reporting in the United States?

• Sarbanes-Oxley Act (SOX)

• Payment Card Industry Data Security Standard (PCI DSS)

• Gramm-Leach-Bliley Act (GLBA)

• Federal Financial Institutions Examination Council (FFIEC)

Which security standard is designed to protect credit card data and prevent fraud in payment card transactions?

• Sarbanes-Oxley Act (SOX)

• Payment Card Industry Data Security Standard (PCI DSS)

• Gramm-Leach-Bliley Act (GLBA)

• Federal Financial Institutions Examination Council (FFIEC)

Which legislation requires financial institutions to explain their information-sharing practices to their customers and to safeguard sensitive data?

• Sarbanes-Oxley Act (SOX)

• Payment Card Industry Data Security Standard (PCI DSS)

• Gramm-Leach-Bliley Act (GLBA)

• Federal Financial Institutions Examination Council (FFIEC)

Which regulatory agency provides guidelines and standards for financial institutions to assess and manage cybersecurity risks?

• Sarbanes-Oxley Act (SOX)

• Payment Card Industry Data Security Standard (PCI DSS)

• Gramm-Leach-Bliley Act (GLBA)

• Federal Financial Institutions Examination Council (FFIEC)

What is the term used to describe a security protocol that requires users to provide two or more forms of verification before granting access to a system?

• Multi-Factor Authentication (MFA)

• Google Authenticator

• Microsoft Authenticator

• Open Authorization (OAuth)

Which authentication method generates a time-based one-time password (TOTP) that users enter alongside their regular credentials?

Which authentication method provides a two-step verification process by requiring users to confirm their identity using a mobile app?

• Multi-Factor Authentication (MFA)

• Google Authenticator

• Microsoft Authenticator

• Open Authorization (OAuth)

Which security protocol allows third-party applications to access user data without exposing credentials?

• Multi-Factor Authentication (MFA)

• Google Authenticator

• Microsoft Authenticator

• Open Authorization (OAuth)

What is the term used to describe the process of replacing sensitive data with a unique identifier that retains its format but is not reversible?

• Tokenization

• Anonymization

• Encryption

• Decryption

Which type of data is typically tokenized or anonymized to protect sensitive information in financial transactions?

• Payment Card Industry (PCI) data

• Personally Identifying Information (PII) data

• Usernames and passwords

• Social Security numbers