CLM Legal Technology & Information Management 3

Question 1

Multi-factor authentication (MFA) in law firm systems requires users to verify identity using:

Accepted Answer

Two or more independent credentials from different factor categories

Answer

A password and a security question from the same category

Answer

Only biometric data

Answer

Only hardware tokens without passwords

Question 2

When a law firm experiences a data breach involving client personal information, attorneys' professional responsibility obligations typically include:

Accepted Answer

Notifying affected clients promptly and taking reasonable remediation steps

Answer

Notifying only the state bar and no one else

Answer

Waiting for clients to discover the breach independently

Answer

Destroying all affected records immediately

Question 3

In legal practice management software, a 'matter' is defined as:

Accepted Answer

A specific legal case, transaction, or project for a client

Answer

A billing dispute between attorney and client

Answer

A category of firm expenses

Answer

An internal task assigned to a paralegal

Question 4

Which principle from information security frameworks requires that users be granted only the minimum level of system access necessary to perform their job functions?

Accepted Answer

Principle of least privilege

Answer

Defense in depth

Answer

Zero-trust architecture

Answer

Role-based access control

Question 5

When law firms use AI-assisted legal research tools, which professional responsibility concern is most critical?

Accepted Answer

Verifying AI-generated citations and legal conclusions for accuracy before relying on them

Answer

The cost of AI subscriptions exceeding the budget

Answer

Training paralegals to use AI tools independently

Answer

Ensuring AI tools are built on open-source software

Question 6

The concept of 'information governance' in a law firm context encompasses:

Accepted Answer

The policies, processes, and controls for managing information assets across their full lifecycle

Answer

Only the IT department's responsibility for server maintenance

Answer

The court's rules for submitting electronic evidence

Answer

Only document retention and destruction policies

Question 7

A law firm's Bring Your Own Device (BYOD) policy should address which of the following to protect client confidentiality?

Accepted Answer

Required security measures and the firm's right to remotely wipe firm data from personal devices

Answer

Employee personal social media usage on personal devices only

Answer

Reimbursement for personal device purchases

Answer

Prohibition of all personal devices in the office