National Cybersecurity Law and Policy: A Comprehensive Guide for Cybersecurity Professionals

Question 1

Identify the primary federal agency responsible for cybersecurity in the United States.

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

National Security Agency (NSA)

Answer

Federal Bureau of Investigation (FBI)

Answer

Department of Defense (DoD)

Question 2

State the primary purpose of the Cybersecurity Maturity Model Certification (CMMC).

Accepted Answer

Evaluate cybersecurity maturity of organizations handling sensitive data

Answer

Enforce compliance with international cybersecurity standards

Answer

Provide training for cybersecurity professionals

Answer

Certify cybersecurity products and technologies

Question 3

Which ethical principle guides the responsible disclosure of cybersecurity vulnerabilities?

Accepted Answer

Vulnerability disclosure

Answer

Patch management

Answer

Privacy protection

Answer

Open source intelligence

Question 4

Which key principle of the Cybersecurity Information Sharing Act (CISA) encourages voluntary sharing of cybersecurity information among organizations?

Accepted Answer

Voluntary sharing of cybersecurity information

Answer

Government-mandated reporting of cybersecurity incidents

Answer

Creation of a national cybersecurity database

Answer

Immunity from liability for cybersecurity information sharing

Question 5

According to the Federal Information Security Management Act (FISMA), which agency is responsible for developing and implementing cybersecurity standards for federal agencies?

Accepted Answer

National Institute of Standards and Technology (NIST)

Answer

Department of Homeland Security (DHS)

Answer

Office of Management and Budget (OMB)

Answer

Federal Bureau of Investigation (FBI)

Question 6

What is the primary objective of the Cybersecurity Framework (CSF) developed by the National Institute of Standards and Technology (NIST)?

Accepted Answer

To provide a shared language for discussing cybersecurity

Answer

To establish mandatory cybersecurity standards for all industries

Answer

To create a national cybersecurity certification program

Answer

To fund cybersecurity research and development

Question 7

The Genetic Information Nondiscrimination Act (GINA) protects individuals from discrimination based on:

Accepted Answer

Genetic information and national origin

Answer

Race and gender

Answer

Age and disability

Answer

Religion and political affiliation

Question 8

What is the fundamental purpose of the Health Insurance Portability and Accountability Act (HIPAA)?

Accepted Answer

To safeguard the privacy and security of health information

Answer

To regulate the health insurance industry

Answer

To ensure accessibility to healthcare services

Answer

To allocate funding for medical research

Question 9

Which primary focus of the Gramm-Leach-Bliley Act (GLBA) is to safeguard:

Accepted Answer

Financial privacy

Answer

Intellectual property

Answer

Cybersecurity

Answer

Consumer protection

Question 10

Which federal agency is primarily responsible for coordinating cybersecurity efforts in the United States?

Accepted Answer

Cybersecurity and Infrastructure Security Agency

Answer

National Security Agency

Answer

Federal Bureau of Investigation

Answer

Department of Homeland Security

Question 11

What is the name of the comprehensive federal legislation that requires organizations to notify individuals about data breaches?

Accepted Answer

Data Security Breach Notification Act

Answer

Health Insurance Portability and Accountability Act

Answer

Sarbanes-Oxley Act

Answer

Gramm-Leach-Bliley Act

Question 12

What is the primary objective of the Critical Infrastructure Protection Act (CIPA)?

Accepted Answer

To establish a national strategy for protecting critical infrastructure

Answer

To create a regulatory framework for cybersecurity in the private sector

Answer

To provide funding for cybersecurity research and development

Answer

To establish a cybersecurity workforce training program

Question 13

What is the primary function of the National Vulnerability Database (NVD)?

Accepted Answer

To track and catalog known software vulnerabilities

Answer

To provide guidance on how to mitigate vulnerabilities

Answer

To develop and distribute software patches

Answer

To coordinate vulnerability research efforts

Question 14

What is the fundamental difference between a firewall and an intrusion detection system?

Accepted Answer

A firewall prevents unauthorized access, while an intrusion detection system monitors for suspicious activity

Answer

An intrusion detection system prevents unauthorized access, while a firewall monitors for suspicious activity

Answer

Both firewalls and intrusion detection systems prevent unauthorized access

Answer

Both firewalls and intrusion detection systems monitor for suspicious activity

Question 15

What is the key difference between the Cybersecurity Maturity Model Certification (CMMC) and the International Organization for Standardization (ISO) 27001?

Accepted Answer

CMMC is specific to the defense industry, while ISO 27001 is applicable to all industries

Answer

ISO 27001 is specific to the defense industry, while CMMC is applicable to all industries

Answer

CMMC is more comprehensive than ISO 27001

Answer

ISO 27001 is more comprehensive than CMMC

Question 16

Under the Computer Fraud and Abuse Act (CFAA), unauthorized access to a computer system may lead to:

Accepted Answer

Both imprisonment and fines

Answer

Imprisonment for a maximum of five years

Answer

Fines of up to $250,000

Answer

None of the aforementioned

Question 17

Which organization is entrusted with the development and maintenance of the National Institute of Standards and Technology (NIST) Cybersecurity Framework?

Accepted Answer

National Institute of Standards and Technology (NIST)

Answer

Federal Bureau of Investigation (FBI)

Answer

Department of Homeland Security (DHS)

Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Question 18

The Health Insurance Portability and Accountability Act (HIPAA) is a crucial law that safeguards:

Accepted Answer

Medical information

Answer

Financial data

Answer

Educational records

Answer

Government secrets

Question 19

The Sarbanes-Oxley Act primarily addresses issues related to:

Accepted Answer

Financial reporting and corporate governance

Answer

Data privacy and security

Answer

Intellectual property protection

Answer

National security

Question 20

The Cybersecurity Maturity Model Certification (CMMC) is a framework specifically designed for which industry sector?

Accepted Answer

Defense

Answer

Healthcare

Answer

Finance

Answer

Retail

Question 21

Which federal agency within the Department of Homeland Security is primarily responsible for coordinating and supporting the nation's cybersecurity efforts?

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

Federal Bureau of Investigation (FBI)

Answer

National Security Agency (NSA)

Question 22

Which of the following is the primary federal law governing cybersecurity in the United States?

Accepted Answer

Federal Information Security Management Act (FISMA)

Answer

Gramm-Leach-Bliley Act (GLBA)

Answer

Health Insurance Portability and Accountability Act (HIPAA)

Question 23

Which of the following is NOT a protected critical infrastructure sector designated under FISMA?

Accepted Answer

Education

Answer

Healthcare

Answer

Energy

Answer

Water

Question 24

What is the primary purpose of the US National Cyber Incident Response Plan (NCIRP)?

Accepted Answer

Outlines coordinated government response to major cyber incidents

Answer

Governs the collection and analysis of cyber threat intelligence

Answer

Establishes standards for cybersecurity training and certification

Question 25

Which of the following is a key principle of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)?

Accepted Answer

Risk-based approach

Answer

Zero-trust architecture

Answer

End-to-end encryption

Question 26

What is the primary goal of the National Strategy for Cyber Incident Preparedness and Response?

Accepted Answer

Improve coordination and effectiveness of incident response across government agencies and the private sector

Answer

Establish a national cybersecurity training program

Question 27

Which of the following is a primary function of the US Cyber Command (CYBERCOM)?

Accepted Answer

Defends US networks and systems from cyber attacks

Answer

Investigates and prosecutes cybercrimes

Answer

Develops and implements cybersecurity policies

Answer

Coordinates international cybersecurity efforts

Question 28

What is the primary significance of the Paris Call for Trust and Security in Cyberspace?

Accepted Answer

International agreement to promote responsible behavior in cyberspace

Answer

Treaty regulating the use of offensive cyber operations

Answer

Framework for cybersecurity certification and standards