CS0-002 Exam Question 181

A pharmaceutical company's marketing team wants to send out notifications about new products to alert users of recalls and newly discovered adverse drug reactions. The team plans to use the names and mailing addresses that users have provided.
Which of the following data privacy standards does this violate?
  • CS0-002 Exam Question 182

    Because some clients have reported unauthorized activity on their accounts, a security analyst is reviewing network packet captures from the company's API server. A portion of a capture file is shown below:
    POST /services/v1_0/Public/Members.svc/soap <s:Envelope+xmlns:s="http://schemas.s/soap/envelope/
    "><s:Body><GetIPLocation+xmlns="http://tempuri.org/">
    <request+xmlns:a="http://schemas.somesite.org"+xmlns:i="http://www.w3.org/2001/XMLSchema-instance
    "></s:Body></s:Envelope> 192.168.1.22 - - api.somesite.com 200 0 1006 1001 0 192.168.1.22 POST /services/v1_0/Public/Members.svc/soap
    <<a:Password>Password123</a:Password><a:ResetPasswordToken+i:nil="true"/>
    <a:ShouldImpersonatedAuthenticationBePopulated+i:nil="true"/><a:Username>[email protected]
    192.168.5.66 - - api.somesite.com 200 0 11558 1712 2024 192.168.4.89
    POST /services/v1_0/Public/Members.svc/soap <s:Envelope+xmlns:s="http://schemas.xmlsoap.org/soap
    /envelope/"><s:Body><GetIPLocation+xmlns="http://tempuri.org/">
    <a:IPAddress>516.7.446.605</a:IPAddress><a:ZipCode+i:nil="true"/></request></GetIPLocation></s:Body><
    192.168.1.22 - - api.somesite.com 200 0 1003 1011 307 192.168.1.22
    POST /services/v1_0/Public/Members.svc/soap <s:Envelope+xmlns:s="
    http://schemas.xmlsoap.org/soap/envelope/ http://tempuri.org/">
    <request+xmlns:a="http://schemas.datacontract.org/2004/07/somesite.web+xmlns:i="
    http://www.w3.org/2001/XMLSch
    <a:ApiToken>kmL4krg2CwwWBan5BReGv5Djb7syxXTNKcWFuSjd</a:ApiToken><a:ImpersonateUserId>0<
    <a:NetworkId>4</a:NetworkId><a:ProviderId>''1=1</a:ProviderId><a:UserId>13026046</a:UserId></a:Authe
    192.168.5.66 - - api.somesite.com 200 0 1378 1209 48 192.168.4.89
    Which of the following MOST likely explains how the clients' accounts were compromised?
  • CS0-002 Exam Question 183

    A security analyst discovers accounts in sensitive SaaS-based systems are not being removed in a timely manner when an employee leaves the organization.
    To BEST resolve the issue, the organization should implement?
  • CS0-002 Exam Question 184

    A company's marketing emails are either being found in a spam folder or not being delivered at all. The security analyst investigates the issue and discovers the emails in question are being sent on behalf of the company by a third party in1marketingpartners.com Below is the exiting SPP word:

    Which of the following updates to the SPF record will work BEST to prevent the emails from being marked as spam or blocked?
    A)

    B)

    C)

    D)
  • CS0-002 Exam Question 185

    Which of the following is a control that allows a mobile application to access and manipulate information which should only be available by another application on the same mobile device (e.g. a music application posting the name of the current song playing on the device on a social media site)?