CIPT Data Lifecycle Management and Governance

Question 1

Which phase of the data lifecycle involves determining what data to collect, for what purpose, and under what legal basis?

Accepted Answer

Data collection and creation

Answer

Data storage and maintenance

Answer

Data archiving

Answer

Data destruction

Question 2

A data retention policy specifies that customer purchase records must be deleted after seven years. Which principle does this policy primarily support?

Accepted Answer

Storage limitation (data retention minimization)

Answer

Data portability

Answer

Integrity and confidentiality

Answer

Purpose limitation

Question 3

What is a data inventory (or data map) primarily used for in a privacy governance program?

Accepted Answer

Documenting where personal data is collected, stored, processed, and shared

Answer

Tracking server uptime and performance metrics

Answer

Auditing user login activity

Answer

Managing software licenses

Question 4

Which role is typically responsible for defining data classification levels and associated handling requirements in a data governance program?

Accepted Answer

Data owner

Answer

Data processor

Answer

Data subject

Answer

Data custodian

Question 5

An organization applies different handling rules to 'confidential,' 'internal,' and 'public' data categories. What process created these distinctions?

Accepted Answer

Data classification

Answer

Data masking

Answer

Data lineage tracking

Answer

Data normalization

Question 6

During the data disposal phase, which method best ensures that magnetic hard drive data is unrecoverable?

Accepted Answer

Degaussing followed by physical destruction

Answer

Standard file deletion

Answer

Formatting the drive once

Answer

Overwriting with zeros one time