Summarize Compliance Requirements DA0-001 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A pharmaceutical company must comply with FDA regulations that require retaining clinical trial records for at least two years after the study is completed. The company's retention schedule currently lists a one-year retention period for these records. What should the company do?

   • ADelete the records after one year to save storage space
   • BKeep the one-year period and hope the FDA does not audit
   • CUpdate the retention schedule to reflect the two-year regulatory requirement
   • DExtend the retention period to five years for all records
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization is preparing for an audit and needs to demonstrate that its data retention policy is effective. Which combination of documentation would provide the STRONGEST evidence?

   • AAudit logs and a network diagram
   • BRetention policy, retention schedule, and audit logs showing data deletion and access
   • CRetention policy and employee training records
   • DRetention schedule and a list of data owners
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A healthcare organization is updating its data retention policy to align with HIPAA. The policy must specify how long to keep medical records and when to destroy them. Which component is MOST essential to include in the policy?

   • AA description of the database schema used to store the records
   • BA procedure for backing up data to an offsite location
   • CA list of all employees who have access to the data
   • DA defined retention period for each data category, based on regulatory requirements
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why are regular audits important for an organization's data governance compliance program?

   • AThey provide ongoing assurance that data handling practices remain compliant over time
   • BThey guarantee that no data breach will ever occur
   • CThey eliminate the need for data classification and access controls
   • DThey replace the need for employee training on data policies
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is subject to both GDPR and a local law that requires retaining employment records for five years. GDPR requires that personal data not be kept longer than necessary. How should the company reconcile these requirements?

   • ASeek consent from employees to retain their data for five years
   • BAnonymize the records after one year to avoid GDPR obligations
   • CDelete employment records after one year to comply with GDPR's storage limitation
   • DRetain employment records for five years, as the local law provides a legal basis for the retention
   Reveal Solution Discussion Select an answer first