Information Security and GDPR Assessment

What is GDPR?

• General Data Protection Regulation

• Global Data Protection Rules

• General Digital Privacy Rights

• Government Data Protection Registry

Which of the following is NOT a principle of GDPR?

• Lawfulness and transparency

• Purpose limitation

• Unlimited data storage

• Data minimization

What is a common physical security measure in organizations?

• Antivirus software

• Access control cards

• Password policies

• Firewall settings

Who is responsible for handling data protection in an organization under GDPR?

• IT Manager

• Data Protection Officer (DPO)

• CEO

• Security Guard

What is the maximum fine for serious GDPR violations?

• €10 million

• €20 million or 4% of global revenue, whichever is higher

• €5 million

• €1 million

Which of the following is an example of biometric security?

• Password protection

• Security cameras

• Fingerprint scanning

• Door locks

What is data encryption?

• Deleting sensitive information

• Converting data into a coded form

• Copying data to multiple locations

• Sharing data with third parties

Under GDPR, what is the time limit for reporting a data breach?

• 72 hours

• 48 hours

• 24 hours

• 1 week

What is two-factor authentication?

Which is NOT a data subject right under GDPR?

• Right to be forgotten

• Right to access

• Right to unlimited data storage

• Right to data portability