A multinational company operates in the EU and must comply with GDPR. The company's data retention policy currently keeps customer personal data for 10 years. What is the PRIMARY compliance concern?

The data is not encrypted at rest

The data is stored in a public cloud, which is not allowed under GDPR

The retention period may be longer than necessary, violating the storage limitation principle

The company has not appointed a Data Protection Officer (DPO)

Which regulation imposes data retention requirements on public companies for financial records and audit workpapers?

Health Insurance Portability and Accountability Act (HIPAA)

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

Why is it important to maintain audit documentation for data governance compliance?

It provides evidence that data management practices meet regulatory and policy requirements

It allows the organization to avoid implementing any data security controls

It ensures that all data is stored in a single centralized database

It is required only for organizations that have experienced a data breach

A healthcare provider is subject to HIPAA, which requires retaining medical records for six years. The provider also has a business need to keep research data for 10 years. What is the BEST retention strategy?

Retain all data for 10 years to satisfy the business need

Retain all data for six years to comply with HIPAA

Retain medical records for six years and research data for 10 years, with separate retention policies

Delete all data after six years to minimize storage costs

CompTIAData+

Domain 5Objective 2

Summarize Compliance Requirements DA0-001 Practice Questions (Page 6)

Part of the Data governance domain, which accounts for 14% of the DA0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

14%of the exam

Questions 26–29

26application · medium
A multinational company operates in the EU and must comply with GDPR. The company's data retention policy currently keeps customer personal data for 10 years. What is the PRIMARY compliance concern?
Select an answer first
27foundation · easy
Which regulation imposes data retention requirements on public companies for financial records and audit workpapers?
Select an answer first
28foundation · easy
Why is it important to maintain audit documentation for data governance compliance?
Select an answer first
29expert · hard
A healthcare provider is subject to HIPAA, which requires retaining medical records for six years. The provider also has a business need to keep research data for 10 years. What is the BEST retention strategy?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DA0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DA0-001” is a trademark of its owner, used for identification only.