单选题 Under the Digital Millennium Copyright Act（DMCA）, what type of offenses do not require prompt action by an internet service provider after it receives a notification of infringement claim from a copyright holder?
根据《数字千年版权法》（DMCA），什么类型的犯罪不需要互联网服务提供商在收到版权持有人的侵权索赔通知后立即采取行动？

单选题 Match the following numbered wireless attack terms with their appropriate lettered descriptions:
将以下编号的无线攻击术语与其相应的字母描述相匹配：
Wireless attack terms无线攻击形式
1：Rogue access point欺骗访问点
2：Replay重返攻击
3：Evil twin 邪恶双胞胎／双面恶魔
4：War driving 战争驾驶
Descriptions描述
A：An attack that relies on an access point to spoof a legitimate access point’s SSID and Mandatory Access Control（MAC）address依赖访问点欺骗合法访问点的SSID和强制访问控制（MAC）地址的攻击
B：An access point intended to attract new connections by using an apparently legitimate SSID通过使用明显合法的SSID吸引新连接的接入
C：An attack that retransmits captured communication to attempt to gain access to a targeted system重新传输捕获的通信以试图访问目标系统的攻击
D：The process of using detection tools to find wireless networks使用检测工具查找无线网络的过程

单选题 What is the final step of a quantitative risk analysis?
定量风险分析的最后一步是什么？

单选题 In 1991, the Federal Sentencing Guidelines formalized a rule that requires senior executives to take personal responsibility for information security matters. What is the name of this rule?
1991年，《联邦判决指南》正式规定了一项规则，要求高级执行官对信息安全事项承担个人责任。这条规则的名称是什么？

单选题 FlyAway Travel has offices in both the European Union（EU）and the United States and transfers personal information between those offices regularly. They have recently received a request from an EU customer requesting that their account be terminated. Under the General Data Protection Regulation（GDPR）, which requirement for processing personal information states that individuals may request that their data no longer be disseminated or processed?
FlyAway Travel在欧盟（EU）和美国都设有办事处，并定期在这些办事处之间传输个人信息。他们最近收到一位欧盟客户的请求，要求终止其账户。根据《一般数据保护条例》（GDPR），处理个人信息的哪项要求规定个人可以要求不再传播或处理其数据？

单选题 Which one of the following provides an authentication mechanism that would be appropriate for pairing with a password to achieve multifactor authentication?
以下哪项提供了一种认证机制，适合与密码配对以实现多因素认证？

单选题 Which one of the following elements of information is not considered personally identifiable information that would trigger most United States（U.S.）state data breach laws?
以下哪项信息要素不被视为会触发大多数美国州数据违反法律的个人可识别信息？

单选题 Which one of the following is not one of the three common threat modeling techniques?
以下哪项不是三种常见的威胁建模技术之一？