CDIA Storage, Retrieval & Security Management 5 — Questions and Answers
Question 1: In document security, what is the purpose of digital rights management (DRM) applied to retrieved documents?
- To accelerate document retrieval speed
- To control how recipients can use, print, or share a document after delivery (Correct answer)
- To authenticate the document management server
- To compress documents during transmission
Correct answer: To control how recipients can use, print, or share a document after delivery
DRM enforces usage policies on distributed documents, restricting actions like printing, copying, or forwarding based on defined rights.
Question 2: What is the function of a document hash value (e.g., SHA-256) in a records management system?
- Compresses the document for storage
- Provides a unique fingerprint to verify the document has not been altered (Correct answer)
- Encrypts the document contents
- Generates search index entries
Correct answer: Provides a unique fingerprint to verify the document has not been altered
A cryptographic hash produces a fixed-length fingerprint of a document's content; any alteration changes the hash, detecting tampering.
Question 3: Which storage media type offers the lowest cost per gigabyte for very long-term, infrequently accessed document archives?
- Solid-state drive (SSD)
- Magnetic tape (LTO) (Correct answer)
- Network-attached storage (NAS)
- Optical disk (DVD-R)
Correct answer: Magnetic tape (LTO)
LTO magnetic tape has the lowest cost per gigabyte among major storage media and is widely used for deep archive tiers with infrequent access.
Question 4: What is the main risk of storing sensitive documents without applying access control lists (ACLs)?
- Documents cannot be indexed by the DMS
- Any authenticated user could view or modify restricted documents (Correct answer)
- Storage capacity planning becomes impossible
- OCR accuracy decreases over time
Correct answer: Any authenticated user could view or modify restricted documents
Without ACLs, all authenticated users may access all documents regardless of sensitivity, violating confidentiality and compliance requirements.
Question 5: In a federated search architecture, what does the search system do when a user submits a query?
- Consolidates all documents into one index before searching
- Simultaneously queries multiple separate repositories and merges results (Correct answer)
- Converts documents to a common format before searching
- Replicates the query to a backup server only
Correct answer: Simultaneously queries multiple separate repositories and merges results
Federated search dispatches a query to multiple disparate repositories in parallel and aggregates the results into a unified result set.
Question 6: Which legal concept requires that electronic documents produced in litigation be provided in a usable, searchable format?
- Chain of custody
- Electronic discovery (eDiscovery) (Correct answer)
- Right of erasure
- Spoliation
Correct answer: Electronic discovery (eDiscovery)
eDiscovery is the process of identifying, collecting, and producing electronically stored information in response to legal proceedings or investigations.
Question 7: When designing a document storage system for compliance with HIPAA, which control is mandatory for documents containing Protected Health Information (PHI)?
- Color-coded folder labeling
- Encryption of PHI both at rest and in transit (Correct answer)
- Storing documents in alphabetical order
- Using proprietary file formats
Correct answer: Encryption of PHI both at rest and in transit
HIPAA's Security Rule requires covered entities to implement encryption safeguards to protect PHI stored or transmitted electronically.
CDIA Storage, Retrieval & Security Management 5
In document security, what is the purpose of digital rights management (DRM) applied to retrieved documents?