Page406

1. A company outsources payroll services to a third-party company. Which of the following roles most likely applies to the third-party payroll company?
   A. Data controller
   B. Data handler
   C. Data owner
   D. Data processor

Correct Answer and Explanation: D. Answer D is correct; a third-party payroll company is an example of a data processor.

Incorrect Answers and Explanations: A, B, and C. Answers A, B, and C are incorrect. A data controller is someone who creates PII, such as an HR department. "Data handler" is not a formal term, and is a distracter answer. A data owner is a management employee responsible for assuring that specific data is protected.

1. Which managerial role is responsible for the actual computers that house data, including the security of hardware and software configurations?
   A. Custodian
   B. Data owner
   C. Mission owner
   D. System owner

Correct Answer and Explanation: D. Answer D is correct; a system owner is responsible for the actual computers that house data, including the security of hardware and software configurations.

Incorrect Answers and Explanations: A, B, and C. Answers A, B, and C are incorrect. A custodian is a non-manager who provides hands-on protection of assets. A data owner is a management employee responsible for assuring that specific data is protected. A mission owner is a member of senior management who creates the information security program and ensures that it is properly staffed, funded, and has organizational priority.

1. What method destroys the integrity of magnetic media such as tapes or disk drives by exposing them to a strong magnetic field, destroying the integrity of the media and the data it contains?
   A. Bit-level overwrite
   B. Degaussing
   C. Destruction
   D. Shredding

Correct Answer and Explanation: B. Answer B is correct; degaussing destroys the integrity of magnetic media such as tapes or disk drives by exposing them to a strong magnetic field, destroying the integrity of the media and the data it contains.

Incorrect Answers and Explanations: A, C, and D. Answers A, C, and D are incorrect. A bit-level overwrite removes data by overwriting every sector of a disk. Destruction physically destroys data, for example via incineration. Shredding electronic data involves overwriting a file's contents before deleting the file.

1. What type of relatively expensive and fast memory uses small latches called "flip-flops" to store bits?
   A. DRAM
   B. EPROM
   C. SRAM
   D. SSD

Correct Answer and Explanation: C. Answer C is correct; SRAM is relatively expensive and fast memory that uses small latches called "flip-flops" to store bits.

Incorrect Answers and Explanations: A, B, and D. Answers A, B, and D are incorrect. DRAM is relatively inexpensive memory that uses capacitors. EPROM is Erasable Programmable Read Only Memory, memory which may be erased with ultraviolet light. SSD is a Solid State Drive, a combination of DRAM and EEPROM.

1. What type of memory stores bits in small capacitors (like small batteries)?
   A. DRAM
   B. EPROM
   C. SRAM
   D. SSD

Correct Answer and Explanation: A. Answer A is correct; DRAM stores bits in small capacitors (like small batteries).

Incorrect Answers and Explanations: B, C, and D. Answers B, C, and D are incorrect. EPROM is Erasable Programmable Read Only Memory, memory which may be erased with ultraviolet light. SRAM is relatively expensive and fast memory that uses small latches called flip-flops to store bits. SSD is a Solid State Drive, a combination of DRAM and EEPROM.