Study Guide Unit 10 Data States,Regulations,Disasters,Forensics

After a flood shuts down the school’s server room, administrators quickly move classes online using Google Classroom. Which plan is this an example of?

• DRP

• BCP

• Backup

• FERPA

Answer explanation

A BCP ensures operations continue during a disruption (teaching keeps going online).

DRP is how to recover from the disaster part of it not continue regular operations

A fire destroys the central gradebook server. The IT department follows written steps to restore data from external drives and reinstall the system. Which process is being used?

• Risk Management

• Backup

• DRP

• NIST SP-800-61

Answer explanation

A DRP details how to recover IT systems after a disaster — here, the gradebook server.

A teacher accidentally shares student transcripts with the wrong parent. Which U.S. law applies?

• FERPA

• HIPAA

• PCI DSS

• GDPR

Answer explanation

FERPA protects student education records.

A U.S. federal agency is fined for not properly securing employee Social Security numbers. Which regulation applies?

• FISMA

• GDPR

• FERPA

• PCI DSS

Answer explanation

FISMA applies to federal agencies securing sensitive government data.

A clothing company in New York collects names and addresses from customers in France. Which regulation covers this data?

• FERPA

• HIPAA

• PCI DSS

• GDPR

Answer explanation

GDPR protects EU citizens’ personal data, no matter where the company is located.

A hospital accidentally leaves patient records unsecured on a laptop that gets stolen. Which law applies?

• HIPAA

• FERPA

• PCI DSS

• FISMA

Answer explanation

HIPAA regulates the security and privacy of medical records.

An online store suffers a data breach where thousands of credit card numbers are stolen. Which standard is being violated?

• PCI DSS

• NIST SP-800-61

• HIPAA

• GDPR

Answer explanation

PCI DSS governs security for payment card data.

A cybersecurity team documents step-by-step actions taken to respond to a ransomware attack. Which framework guides this?

• BCP

• DRP

• NIST SP-800-61

• Code of Ethics

Answer explanation

NIST SP-800-61 is the U.S. guide for handling incidents.

A penetration tester is asked to share vulnerabilities they find responsibly and not exploit them. Which principle guides this?

• Chain of Custody

• Code of Ethics

• FERPA

• Backup

Answer explanation

A Code of Ethics guides professional behavior and responsible disclosure.

A school district lists all its IT assets, including laptops and servers, to track what needs protection. What practice is this?

• Software/Hardware Inventory

• Risk Acceptance

• Evidence Handling

• Backup

Answer explanation

Inventories track all assets so risks can be managed.