Question 1

Which statement is FALSE regarding the provisions of the Employee Polygraph Protection Act of 1988 (EPPA)?

Options :

A : The EPPA requires that employers post essential information about the Act in a conspicuous location

B : The EPPA includes an exception that allows polygraph tests in professions in which employee honesty is necessary for public safety.

C : Employers are prohibited from administering psychological testing based on personality traits such as honesty, preferences or habits.

D : Employers involved in the manufacture of controlled substances may terminate employees based on polygraph results if other evidence exists

Answer: C

Question 2

Which of the following would NOT be considered a method of obtaining verifiable parental consent before collecting, using or disclosing personal information from children under the Children’s Online Privacy Protection Act (COPPA) of 1998?

Options :

A : Using a credit card, debit card, or other online payment system

B : Having the parent call a toll-free telephone number staffed by trained personnel.

C : Having the parent sign a consent form and return it to the operator by postal mail, facsimile, or electronic scan.

D : Sending a text message to the parent explaining the intended uses of the information.

Answer: D

Question 3

An organization self-certified under Privacy Shield must, upon request by an individual, do what?

Options :

A : Suspend the use of all personal information collected by the organization to fulfill its original purpose

B : Provide the identities of third parties with whom the organization shares personal information.

C : Provide the identities of third and fourth parties that may potentially receive personal information

D : Identify all personal information disclosed during a criminal investigation

Answer: B

Question 4

Which jurisdiction must courts have in order to hear a particular case?

Options :

A : Subject matter jurisdiction and regulatory jurisdiction

B : Subject matter jurisdiction and professional jurisdiction

C : Personal jurisdiction and subject matter jurisdiction

D : Personal jurisdiction and professional jurisdiction

Answer: C

Question 5

Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

Options :

A : Being more closely scrutinized for any breaches of policy

B : Getting accused of discriminatory practices

C : Attracting skepticism from auditors

D : Having a security system failure

Answer: A