QUESTION: 37

A user grants an IoT manufacturer consent to store personally identifiable information (PII). According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?

Within ninety days after collection, unless required for a legal proceeding
Within thirty days of a user's written request
Within seven days of being transferred to secure, long-term storage
Within sixty days after collection, unless encrypted

Answer(s): B

Reveal Solution Next Question

QUESTION: 38

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

Collect as much data as possible so as to maximize potential value of the new IoT use-case.
Collect only the minimum amount of data required to perform all the business functions.
The amount or type of data collected isn't important if you have a properly secured IoT device.
The amount or type of data collected isn't important if you implement proper authorization controls.

Answer(s): B

Reveal Solution Next Question

QUESTION: 39

You work for a multi-national IoT device vendor. Your European customers are complaining about their inability to access the personal information about them that you have collected.
Which of the following regulations is your organization at risk of violating?

Sarbanes-Oxley (SOX)
General Data Protection Regulation (GDPR)
Electronic Identification Authentication and Trust Services (elDAS)
Database Service on Alternative Methods (DB-ALM)

Answer(s): B

Reveal Solution Next Question

QUESTION: 40

You made an online purchase of a smart watch from a software as a service (SaaS) vendor, and filled out an extensive profile that will help you track several fitness variables. The vendor will provide you with customized health insights based on your profile. With which of the following regulations should the company be compliant? (Choose three.)

Gramm-Leach-Bliley Act (GLBA)
Payment Card Industry Data Security Standard (PCI-DSS)
Federal Information Security Management Act (FISMA)
Sarbanes-Oxley (SOX)
Health Insurance Portability and Accountability Act (HIPAA)
Family Educational Rights and Privacy Act (FERPA)
Federal Energy Regulatory Commission (FERC)

Answer(s): B,E,F

Reveal Solution Next Question

Free ITS-110 Exam Braindumps (page: 10)

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40