Summarize Compliance Requirements DA0-001 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is implementing a data retention policy and must comply with GDPR. The company also wants to minimize storage costs. Which approach BEST balances GDPR compliance and cost efficiency?

   • AStore all data in cold storage to reduce costs, but never delete it
   • BImplement automated deletion of data that has reached the end of its retention period
   • CRetain all data for the maximum period allowed by law to avoid accidental deletion
   • DDelete all data immediately after processing to minimize storage
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An external auditor is reviewing a company's data governance practices. The auditor asks for proof that data retention policies are enforced. Which evidence would be MOST convincing?

   • AAutomated system logs showing that data is purged according to the retention schedule
   • BA signed copy of the retention policy by the CEO
   • CA verbal assurance from the IT manager that data is deleted regularly
   • DA presentation explaining the retention policy to employees
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A healthcare organization is creating a data retention policy. Which component is essential for the policy to be effective in a compliance framework?

   • AA specified retention period for each data type, aligned with legal and regulatory requirements
   • BA requirement to store all data indefinitely to avoid any risk of deletion
   • CA mandate to delete all data immediately after it is used for its primary purpose
   • DA policy that applies only to data stored in cloud environments
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does regulatory compliance impact data management practices in an organization?

   • AIt dictates how data must be collected, stored, used, and disposed of to meet legal obligations
   • BIt eliminates the need for data classification because all data is treated equally
   • CIt only affects data that is stored in cloud environments
   • DIt requires organizations to share all data with government agencies
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A global company must comply with GDPR for EU customer data and with local data retention laws in each country where it operates. The local laws require longer retention than GDPR's storage limitation principle. What is the BEST approach?

   • AApply the shortest retention period to minimize data storage
   • BApply GDPR's storage limitation and ignore local laws
   • CAnonymize all data after the shortest period to avoid conflicts
   • DApply the longest retention period required by any applicable law
   Reveal Solution Discussion Select an answer first