Information Governance CGEIT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of classifying information?

   • ATo assign ownership of information to specific individuals.
   • BTo apply appropriate levels of protection based on the sensitivity and criticality of the information.
   • CTo organize information alphabetically for easier retrieval.
   • DTo determine the storage location of information.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of an escalation process in information governance?

   • ATo transfer ownership of information assets to the legal department.
   • BTo provide a defined path for resolving disputes or decisions that cannot be made at a lower level.
   • CTo automatically approve all requests for information access.
   • DTo bypass governance policies when urgent decisions are needed.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A healthcare provider is implementing a new electronic health record (EHR) system. The system automatically deletes patient records 7 years after the last visit, per the provider's retention policy. However, the provider is involved in a class-action lawsuit that requires all patient records to be preserved. The legal team has issued a litigation hold. What is the most appropriate action?

   • AExport all patient records to an external archive and delete them from the EHR system.
   • BPlace a litigation hold on all patient records in the EHR system, overriding the retention schedule until the hold is lifted.
   • CContinue with the automatic deletion and rely on backups to restore records if needed.
   • DDisable the automatic deletion feature in the EHR system for the duration of the litigation hold.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a key governance requirement during the disposal stage of the information asset lifecycle?

   • AEnsuring that information is destroyed in a manner that prevents unauthorized recovery.
   • BTransferring ownership of the information to the IT department.
   • CMaximizing the reuse of storage space by overwriting data with random patterns.
   • DArchiving all information to tape for long-term storage.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services firm has a policy that all client contracts must be retained for 7 years after the contract ends. An auditor has discovered that several contracts from 5 years ago were deleted from the system. The IT department says the deletion was part of a routine cleanup of files older than 5 years. What control should the firm implement to prevent this from recurring?

   • ARequire IT to manually review all files older than 5 years before deletion.
   • BImplement a legal hold feature in the document management system that overrides the routine cleanup for contracts subject to the retention schedule.
   • CChange the retention policy to 5 years to match the IT cleanup schedule.
   • DDisable all automated deletion in the document management system.
   Reveal Solution Discussion Select an answer first