2.0 Data & Privacy

Question 1

personally identifiable information (PII)

Answer 1

data that could reveal a person’s identity

Question 2

threat actors

Answer 2

cybercriminals

Question 3

identity fraud

Answer 3

The invention of fake personal information or the theft and misuse of an individual’s personal information.

Question 4

algorithms

Answer 4

Operations that transform a plaintext into a ciphertext with cryptographic properties, also called a cipher. There are symmetric, asymmetric, and hash cipher types.

Question 4

cookies

Answer 4

A text file used to store information about a user when they visit a website.

Question 5

short message service (SMS)

Answer 5

System for sending text messages between cell phones.

Question 6

encryption

Answer 6

Scrambling the characters used in a message so that the message can be seen but not understood or modified unless it can be deciphered. Encryption provides for a secure means of transmitting data and authenticating users. It is also used to store data securely. Encryption uses different types of algorithm/cipher and one or more keys. The size of the key is one factor in determining the strength of the encryption product.

Question 7

End-to-end encryption

Answer 7

a method of secure communication that prevents third parties from reading your data while it’s transferred from one system or device to another.

Question 8

File Transfer Protocol (FTP)

Answer 8

Application protocol used to transfer files between network hosts. Variants include:
S(ecure)FTP
FTP with SSL (FTPS and FTPES)
T(rivial)FTP
***FTP utilizes ports 20 and 21.

Question 9

artificial intelligence (AI)

Answer 9

The science of creating machines with the ability to develop problem-solving and analysis strategies without significant human direction or intervention.

Question 10

machine learning (ML)

Answer 10

A component of AI that enables a machine to develop strategies for solving a task given a labeled dataset where features have been manually identified but without further explicit instructions.

Question 11

General Data Protection Regulation (GDPR)

Answer 11

Provisions and requirements protecting the personal data of European Union (EU) citizens. Transfers of personal data outside the EU Single Market are restricted unless protected by like-for-like regulations, such as the US’s Privacy Shield requirements.

Question 12

CCPA (California Consumer Privacy Act)

Answer 12

The CCPA is a law that helps people living in California know:
WHAT personal information (PII) companies collect about them,
WHY they collect it.
WHO they share it with.
It lets people in California:
SEE their personal information.
ASK for it to be deleted.
SAY NO to having it sold.

Question 13

Health Insurance Portability and Accountability Act (HIPAA)

Answer 13

US federal law that protects the storage, reading, modification, and transmission of personal healthcare data.

Question 14

Encryption

Answer 14

Scrambling the characters used in a message so that the message can be seen but not understood or modified unless it can be deciphered. Encryption provides for a secure means of transmitting data and authenticating users. It is also used to store data securely. Encryption uses different types of algorithm/cipher and one or more keys. The size of the key is one factor in determining the strength of the encryption product.

Question 15

ciphertext

Answer 15

Data that has been enciphered and cannot be read without the cipher key.

Question 16

plaintext

Answer 16

Unencrypted data that is meant to be encrypted before it is transmitted, or the result of decryption of encrypted data.

Question 17

Data at rest

Answer 17

data is sitting still, saved somewhere such as on a computer or in the cloud.

Question 18

Data in transit

Answer 18

data in motion, is when data is moving from one place to another over the Internet or a network.

Question 19

HyperText Transfer Protocol Secure (HTTPS)

Answer 19

Application protocol used to provide web content to browsers. HTTP uses port 80. HTTPS(ecure) provides for encrypted transfers, using TLS and port 443.

Question 20

virtual private network (VPN)

Answer 20

A secure tunnel created between two endpoints connected via an unsecure transport network (typically the Internet).

Question 21

two-factor authentication (2FA)

Answer 21

Strong authentication mechanism that requires a user to submit two different types of credential, such as a fingerprint scan plus PIN. Often, the second credential is transmitted via a second trusted device or account. This is also referred to as 2-step verification.