CompTIA Security+ Certification Exam SY0-701 Practice Test 24

What is a detailed agreement outlining work to be performed on a project?

• MSA

• SLA

• WO

• SOW

Answer explanation

A SOW, or Statement of Work, is a detailed agreement that outlines the specific work to be performed on a project, including deliverables, timelines, and responsibilities, making it the correct choice.

Which contract restricts a person from sharing confidential information?

• ISA

• NDA

• BPA

• SLA

Answer explanation

The correct choice is NDA (Non-Disclosure Agreement), which specifically restricts individuals from sharing confidential information. Other options like ISA, BPA, and SLA do not primarily focus on confidentiality.

What formal contract outlines the rights and obligations of business partners?

• MSA

• SLA

• BPA

• MOA

Answer explanation

A Business Partnership Agreement (BPA) is the formal contract that outlines the rights and obligations of business partners, detailing their roles, responsibilities, and profit-sharing arrangements.

What is the term for assessing risks and facts before making decisions?

• Fiduciary duty

• Due care

• Standard of care

• Due diligence

Answer explanation

The term 'due diligence' refers to the process of assessing risks and facts before making decisions, ensuring informed choices. It is crucial in various fields, particularly in finance and law.

Which term describes actions taken to mitigate known risks?

• Due diligence

• Standard of care

• Due care

• Fiduciary duty

Answer explanation

Due care refers to the actions taken to mitigate known risks, ensuring that reasonable precautions are taken to prevent harm. This term is essential in legal and professional contexts to demonstrate responsibility.

What is the term for the person whose data is collected and processed?

• Data holder

• Data owner

• Data user

• Data subject

Answer explanation

The correct term for the person whose data is collected and processed is 'Data subject'. This term specifically refers to individuals whose personal information is being handled.

Who determines the purpose and means of processing personal data?

• Data processor

• Data owner

• Data controller

• Data subject

Answer explanation

The data controller is responsible for determining the purpose and means of processing personal data. They make decisions about how data is handled, unlike the data processor, who merely processes data on behalf of the controller.

Who processes data on behalf of the controller?

• Data steward

• Data processor

• Data subject

• Data custodian

Answer explanation

The data processor is the entity that processes data on behalf of the data controller, handling tasks such as storage and analysis. This role is distinct from the data steward, data subject, and data custodian.

Which principle allows people to request deletion of personal data?

• De-identification

• Right to be forgotten

• Anonymization

• Consent management

Answer explanation

The 'Right to be forgotten' allows individuals to request the deletion of their personal data, ensuring privacy and control over their information. This principle is crucial in data protection laws.

What is a formal auditor declaration of compliance with standards?

• Assertion

• Certification

• Validation

• Attestation

Answer explanation

An attestation is a formal auditor declaration of compliance with standards, confirming that certain criteria have been met. This distinguishes it from assertion, certification, and validation, which have different meanings.