CDT Security & Privacy in Document Management 3

Question 1

Which privacy regulation requires organizations to obtain explicit consent before processing personal data of EU residents, even when the organization is based in the US?

Accepted Answer

GDPR

Answer

The General Data Protection Regulation (GDPR) has extraterritorial reach and applies to any organization processing personal data of EU residents.

Question 2

What is 'chain of custody' as it applies to document security?

Accepted Answer

A documented record tracking who handled a document, when, and for what purpose

Answer

Chain of custody is an audit trail proving documents have not been tampered with, critical for legal admissibility and regulatory compliance.

Question 3

A records manager discovers that confidential HR files are stored in a shared folder accessible to all employees. This is an example of which security failure?

Accepted Answer

Excessive access privileges / broken access control

Answer

Storing sensitive files in broadly accessible locations violates access control principles and exposes confidential information to unauthorized users.

Question 4

Under SOX Section 802, what is the criminal penalty for knowingly altering or destroying documents that are relevant to a federal investigation?

Accepted Answer

Up to 20 years in prison

Answer

SOX Section 802 imposes criminal penalties of up to 20 years imprisonment for knowingly destroying or falsifying documents in federal proceedings.

Question 5

Which control best prevents a terminated employee's credentials from being used to access the document management system?

Accepted Answer

Immediate account deprovisioning upon termination

Answer

Immediate deprovisioning removes access the moment employment ends, preventing any window during which a disgruntled or former employee could misuse credentials.

(CDT) Certified Document Technologist Practice Test

(CDT) Certified Document Technologist Practice Test

CDT Security & Privacy in Document Management 3