Properly configured databases and well-written website codes are the best protection against what online threat?

1. A. Pharming.
2. B. SQL injection.
3. C. Malware execution.
4. D. System modification.

Correct Answer: B

What is a mistake organizations make when establishing privacy settings during the development of applications?

1. A. Providing a user with too many choices.
2. B. Failing to use "Do Not Track” technology.
3. C. Providing a user with too much third-party information.
4. D. Failing to get explicit consent from a user on the use of cookies.

Correct Answer: D

A privacy engineer has been asked to review an online account login page. He finds there is no limitation on the number of invalid login attempts a user can make when logging into their online account.
What would be the best recommendation to minimize the potential privacy risk from this weakness?

1. A. Implement a CAPTCHA system.
2. B. Develop server-side input validation checks.
3. C. Enforce strong password and account credentials.
4. D. Implement strong Transport Layer Security (TLS) to ensure an encrypted link.

Correct Answer: B

After committing to a Privacy by Design program, which activity should take place first?

1. A. Create a privacy standard that applies to all projects and services.
2. B. Establish a retention policy for all data being collected.
3. C. Implement easy to use privacy settings for users.
4. D. Perform privacy reviews on new projects.

Correct Answer: B

Which of the following statements is true regarding software notifications and agreements?

1. A. Website visitors must view the site’s privacy statement before downloading software.
2. B. Software agreements are designed to be brief, while notifications provide more details.
3. C. It is a good practice to provide users with information about privacy prior to software installation.
4. D. “Just in time” software agreement notifications provide users with a final opportunity to modify the agreement.

Correct Answer: C