Perform Operational Risk Analysis CSSLP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A multinational corporation is deploying a human resources application that stores employee personal data, including national identification numbers. The company operates in the EU and the US. The legal team has determined that the application must comply with GDPR for EU employees. What is the most critical compliance consideration during deployment?

   • AAnonymize all employee data before storing it to avoid any regulatory obligations.
   • BObtain consent from all employees to process their data, and no other measures are needed.
   • CEnsure that EU employee data is stored and processed in a manner that complies with GDPR data protection principles, including lawful basis and data subject rights.
   • DStore all employee data only in the US to simplify compliance with US laws.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is incident response training essential for system administrators?

   • AIt is only required for administrators in the QA environment
   • BIt teaches administrators how to write security policies
   • CIt ensures administrators know how to contain and mitigate security incidents promptly
   • DIt helps administrators avoid all security incidents
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying a new financial system. The system administrators will have access to sensitive financial data. The compliance team requires that administrators receive training on incident response. What is the primary goal of this training?

   • AEnsure administrators can configure the system to prevent all incidents.
   • BProvide administrators with a list of contacts for external security consultants.
   • CTeach administrators how to maximize system performance.
   • DEnable administrators to detect, respond to, and report security incidents effectively and in accordance with procedures.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key process for mitigating compliance risk during system maintenance?

   • ARemoving all audit logs to reduce storage costs
   • BConducting regular compliance reviews and updating controls as regulations change
   • CDeferring all security patches until the next major release
   • DGranting all administrators full access to all systems
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   During deployment, which legal concern is most directly related to the use of third-party libraries?

   • AExport control regulations
   • BData residency requirements
   • CAccessibility standards
   • DCopyright and licensing compliance
   Reveal Solution Discussion Select an answer first