Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 1 Question 9 Discussion

Posted by Donte on May 06, 2022 at 03:20 PM

Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems?

Suggested Answer: A

The Computer Fraud and Abuse Act as amended, provides civil penalties for the creator of viruses,

worms, and other types of malicious code

that causes harm to the computer systems.

The Computer Fraud and Abuse Act is a law passed by the United States Congress in 1984 intended

to reduce cracking of computer systems

and to address federal computer-related offenses. The Computer Fraud and Abuse Act (codified as

18 U.S.C. 1030) governs cases with a

compelling federal interest, where computers of the federal government or certain financial

institutions are involved, where the crime itself is

interstate in nature, or computers used in interstate and foreign commerce. It was amended in

1986, 1994, 1996, in 2001 by the USA PATRIOT

Act, and in 2008 by the Identity Theft Enforcement and Restitution Act. Section (b) of the act

punishes anyone who not just commits or

attempts to commit an offense under the Computer Fraud and Abuse Act but also those who

conspire to do so.

Answer option B is incorrect. The Computer Security Act was passed by the United States Congress.

It was passed to improve the security

and privacy of sensitive information in Federal computer systems and to establish a minimum

acceptable security practices for such systems. It

requires the creation of computer security plans, and the appropriate training of system users or

owners where the systems house sensitive

information.

Answer option C is incorrect. The Gramm-Leach-Bliley Act (GLBA) is also known as the Financial

Services Modernization Act of 1999. It is an act

of the 106th United States Congress (1999-2001) signed into law by President Bill Clinton which

repealed part of the Glass-Steagall Act of

1933, opening up the market among banking companies, securities companies and insurance

companies.

The Gramm-Leach-Bliley Act allowed commercial banks, investment banks, securities firms, and

insurance companies to consolidate. This law

also provides regulations regarding the way financial institutions handle private information

belongings to their clients.

Answer option D is incorrect. The Digital Millennium Copyright Act (DMCA) is a United States

copyright law that implements two 1996 treaties of

the World Intellectual Property Organization (WIPO). It criminalizes production and dissemination of

technology, devices, or services intended

to circumvent measures (commonly known as digital rights management or DRM) that control

access to copyrighted works.

It also criminalizes the act of circumventing an access control, whether or not there is actual

infringement of copyright itself. In addition, the

DMCA heightens the penalties for copyright infringement on the Internet.


Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
PE
Pete 11 months ago
Wait, are we sure about that? I thought there were earlier laws.
ST
Stevie 12 months ago
Yeah, CFAA was the first to really tackle this issue.
AN
Annelle 12 months ago
The Computer Security Act is more about protecting systems, not penalties.
MY
Myrtie 12 months ago
I thought it was the Digital Millennium Copyright Act.
TA
Tabetha 1 year ago
It's definitely the Computer Fraud and Abuse Act!
CO
Coleen 1 year ago
I feel like the Digital Millennium Copyright Act might relate to software, but I can't recall if it covers viruses specifically.
KE
Kenny 1 year ago
The Gramm-Leach-Bliley Act seems more about financial privacy, so I doubt it’s the answer here.
ER
Erick 1 year ago
I remember studying the Computer Security Act, but I don’t think it focused on penalties for malicious code like the question asks.
PA
Paola 1 year ago
I think the Computer Fraud and Abuse Act is the right answer, but I’m not entirely sure if it was the first one.
LI
Lino 1 year ago
Hmm, I'm a bit unsure about this one. I know we need to look at the details of the related party transactions, but I'm not sure if the question is asking for a specific type of information. I'll need to think this through carefully.
MO
Mozelle 1 year ago
This looks like a tricky OSPF debug question. I'll need to carefully read through the options and think about what each one is telling me.
DU
Dulce 1 year ago
I think we need to create a NAS subdirectory before using it with ACK, but I'm a bit confused about the process.
EM
Emogene 1 year ago
Hmm, I'm a bit unsure here. Should I first contact the regulator to get their guidance on the best approach? Or would it be better to just retrain the trust administrators on the lost and stolen securities requirements?
0/2000 characters

Save Cancel