CDT Security & Privacy in Document Management 2

Question 1

Which document security control ensures that only authorized personnel can view sensitive records within an EDMS?

Accepted Answer

Role-based access control (RBAC)

Answer

Role-based access control restricts document viewing and editing privileges based on a user's assigned organizational role.

Question 2

Under HIPAA, a covered entity that experiences a breach affecting 500 or more individuals must notify the Secretary of HHS within how many days?

Accepted Answer

60 days

Answer

HIPAA's Breach Notification Rule requires covered entities to notify HHS within 60 days of discovering a breach affecting 500 or more individuals.

Question 3

What is the primary purpose of applying a digital watermark to a controlled document?

Accepted Answer

Detect unauthorized copies and trace document origin

Answer

Digital watermarks embed identifying information into documents to deter unauthorized copying and help trace the source of leaks.

Question 4

A document management policy requires 'least privilege' access. What does this mean?

Accepted Answer

Users receive only the minimum access required for their current duties

Answer

Least privilege limits each user to only the permissions necessary for their specific job responsibilities, reducing insider threat risk.

Question 5

Which encryption standard is currently recommended by NIST for protecting sensitive government documents at rest?

Accepted Answer

AES-256

Answer

NIST recommends AES-256 as the gold standard for encrypting data at rest due to its computational strength against modern attacks.

(CDT) Certified Document Technologist Practice Test