3.2 Designing for Compliance PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A company operating in California collects personal information from California residents. They must comply with CCPA. What is a key requirement they must implement?

   • AEnsure all personal data is stored in the US.
   • BProvide a 'Do Not Sell My Personal Information' link on their website and honor opt-out requests.
   • CAppoint a Data Protection Officer (DPO) and conduct a DPIA.
   • DObtain explicit consent before collecting any personal information.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary role of audit logs in a compliance context?

   • ATo store backup copies of all data
   • BTo provide a record of activities that can be used to demonstrate compliance and detect unauthorized actions
   • CTo improve system performance by caching frequently accessed data
   • DTo automatically block all suspicious users
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   Under HIPAA, which of the following is a key requirement for protecting patient data?

   • AAll patient data must be stored on-premises
   • BPatient data must be encrypted only when transmitted over the internet
   • CImplement administrative, physical, and technical safeguards to protect electronic protected health information (ePHI)
   • DPatient data must be deleted after 30 days
   Reveal Solution Discussion Select an answer first