Page 304 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 304

12.  The Children’s Online Privacy Protection Act (COPPA) was
                    designed to protect the privacy of children using the internet. What

                    is the minimum age a child must be before companies can collect
                    personal identifying information from them without parental
                    consent?

                    A.  13

                    B.  14

                    C.  15

                    D.  16

               13.  Which one of the following is not a requirement that Internet

                    service providers must satisfy in order to gain protection under the
                    “transitory activities” clause of the Digital Millennium Copyright
                    Act?

                    A.  The service provider and the originator of the message must be
                        located in different states.

                    B.  The transmission, routing, provision of connections, or copying
                        must be carried out by an automated technical process without
                        selection of material by the service provider.


                    C.  Any intermediate copies must not ordinarily be accessible to
                        anyone other than anticipated recipients and must not be
                        retained for longer than reasonably necessary.

                    D.  The transmission must be originated by a person other than the
                        provider.

               14.  Which one of the following laws is not designed to protect the
                    privacy rights of consumers and internet users?


                    A.  Health Insurance Portability and Accountability Act

                    B.  Identity Theft Assumption and Deterrence Act

                    C.  USA PATRIOT Act

                    D.  Gramm-Leach-Bliley Act

               15.  Which one of the following types of licensing agreements does not
                    require that the user acknowledge that they have read the
   299   300   301   302   303   304   305   306   307   308   309