CLM Legal Technology & Information Management 2

Question 1

Which cloud computing model is most commonly recommended for law firms handling sensitive client data due to its dedicated infrastructure?

Accepted Answer

Private cloud

Answer

Public cloud

Answer

Community cloud

Answer

Hybrid cloud

Question 2

The EDRM (Electronic Discovery Reference Model) framework outlines the e-discovery process in what general order?

Accepted Answer

Information Governance → Identify → Preserve → Collect → Process → Review → Analyze → Produce → Present

Answer

Review → Collect → Process → Produce

Answer

Collect → Preserve → Review → Analyze → Produce

Answer

Preserve → Collect → Analyze → Review → Present

Question 3

Which of the following best describes a Document Management System (DMS) used in law firms?

Accepted Answer

A system for organizing, storing, tracking, and retrieving legal documents

Answer

Software that automates court filings

Answer

A billing platform integrated with accounting software

Answer

A client relationship management tool

Question 4

Under HIPAA, law firms that handle protected health information (PHI) on behalf of healthcare clients are classified as:

Accepted Answer

Business associates

Answer

Covered entities

Answer

Hybrid entities

Answer

Clearinghouses

Question 5

What is the purpose of a Records Retention Schedule in a law firm?

Accepted Answer

To define how long different categories of records must be kept and when they can be destroyed

Answer

To schedule client meetings and court appearances

Answer

To track billable hours for records management staff

Answer

To organize files by attorney assignment

Question 6

Which cybersecurity framework is most widely referenced for assessing and improving law firm information security programs?

Accepted Answer

NIST Cybersecurity Framework

Answer

ISO 9001

Answer

COBIT 5

Answer

ITIL v4

Question 7

A law firm's IT acceptable use policy (AUP) primarily serves to:

Accepted Answer

Define rules for appropriate use of firm technology resources and establish user responsibilities

Answer

Authorize IT staff to monitor all employee communications without restriction

Answer

Grant employees unlimited access to firm systems from personal devices

Answer

Outsource cybersecurity responsibilities to employees