A project team is developing a new health and fitness tracking application. The app collects user data such as heart rate, sleep patterns, and exercise routines. The project manager is reviewing the data handling policies. The team has decided to anonymize the data before using it for research purposes. Which statement best describes the impact of this decision on privacy and confidentiality?

Anonymization reduces privacy risks but does not eliminate the need for confidentiality controls.

Anonymization is only required if the data is stored in the cloud.

Anonymization is the same as encryption and provides the same level of protection.

Anonymization eliminates all privacy and confidentiality obligations.

Which regulation is specifically designed to protect the personal data of individuals in the European Union?

Health Insurance Portability and Accountability Act (HIPAA)

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

A project manager is working on a project for a global e-commerce company. The project will involve processing personal data of customers in both the EU and the US. The project manager needs to ensure compliance with both GDPR and CCPA. Which approach is the most effective for managing the differing requirements of these regulations?

Ignoring the requirements of CCPA since GDPR is more comprehensive.

Asking customers to choose which regulation they want to be governed by.

Adopting the stricter of the two regulations for all customers globally.

Creating separate systems for EU and US customers to handle data independently.

A US-based healthcare organization is launching a project to develop a patient portal that will collect and store protected health information (PHI). The project manager is creating the project charter and needs to identify the primary regulatory framework that will govern the handling of this data. Which regulation should the project manager cite as the primary compliance driver for this project?

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

Health Insurance Portability and Accountability Act (HIPAA)

CompTIAProject+

Domain 4Objective 3

Compliance and Privacy PK0-005 Practice Questions (Page 5)

Part of the Basics of IT and governance domain, which accounts for 18% of the PK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

18%of the exam

Questions 21–25

21expert · hard
A project team is developing a new health and fitness tracking application. The app collects user data such as heart rate, sleep patterns, and exercise routines. The project manager is reviewing the data handling policies. The team has decided to anonymize the data before using it for research purposes. Which statement best describes the impact of this decision on privacy and confidentiality?
Select an answer first
22foundation · easy
Which regulation is specifically designed to protect the personal data of individuals in the European Union?
Select an answer first
23expert · hard
A project manager is working on a project for a global e-commerce company. The project will involve processing personal data of customers in both the EU and the US. The project manager needs to ensure compliance with both GDPR and CCPA. Which approach is the most effective for managing the differing requirements of these regulations?
Select an answer first
24application · medium
A US-based healthcare organization is launching a project to develop a patient portal that will collect and store protected health information (PHI). The project manager is creating the project charter and needs to identify the primary regulatory framework that will govern the handling of this data. Which regulation should the project manager cite as the primary compliance driver for this project?
Select an answer first
25foundation · easy
Which data protection strategy involves converting data into a coded format that can only be read by authorized parties?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PK0-005” is a trademark of its owner, used for identification only.

Compliance and Privacy PK0-005 Practice Questions (Page 5)

Questions 21–25

Which regulation is specifically designed to protect the personal data of individuals in the European Union?

Which data protection strategy involves converting data into a coded format that can only be read by authorized parties?

Keep studying — Basics of IT and governance