All of the following can be indications of a ransomware attack EXCEPT?

• A. An increased amount of spam email in an individual's inbox.
• B. The inability to access certain files.
• C. An increase in activity of the CPU of a computer for no apparent reason.
• D. The detection of suspicious network communications between the ransomware and the attacker's command and control servers.

SCENARIO
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camera. EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
First and last name
Date of birth (DOB)
Mailing address
Email address
Car VIN number
Car model
License plate
Insurance card number
Photo
Vehicle diagnostics
Geolocation
What would be the best way to supervise the third-party systems the EnsureClaim App will share data with?

• A. Review the privacy notices for each third-party that the app will share personal data with to determine adequate privacy and data protection controls are in place.
• B. Develop policies and procedures that outline how data is shared with third-party apps.
• C. Anonymize all personal data collected by the app before sharing any data with third-parties.
• D. Conduct a security and privacy review before onboarding new vendors that collect personal data from the app.

What is the main issue pertaining to data protection with the use of 'deep fakes'?

• A. Issues with establishing non-repudiation.
• B. Non-conformity with the accuracy principle.
• C. Issues with confidentiality of the information.
• D. Misinformation.

A BaaS provider backs up the corporate data and stores it in an outsider provider under contract with the organization. A researcher notifies the organization that he found unsecured data in the cloud. The organization looked into the issue and realized $ne of its backups was misconfigured on the outside provider's cloud and the data fully exposed to the open internet. They quickly secured the backup. Which is the best next step the organization should take?

• A. Review the content of the data exposed.
• B. Investigate using alternate BaaS providers or on-premise backup systems.
• C. Investigate how the researcher discovered the unsecured data.
• D. Review its contract with the outside provider.

Which of the following best determines the effectiveness of an email opt-out mechanism?

• A. Whether a person can understand what steps to undertake to complete the opt-out.
• B. Whether a person receives periodic updates of the opt-out progress.
• C. Whether a person can only opt out under clear conditions.
• D. Whether a person can opt out on behalf of others.