Drupal Regulatory Frameworks & Compliance 2

Question 1

Which Drupal module is commonly used to implement cookie consent banners required by GDPR and ePrivacy regulations?

Accepted Answer

EU Cookie Compliance

Answer

The EU Cookie Compliance module provides configurable cookie consent banners that satisfy GDPR and ePrivacy Directive requirements.

Question 2

Under HIPAA, which type of Drupal data at rest containing Protected Health Information (PHI) requires encryption?

Accepted Answer

Both database records and file system storage

Answer

HIPAA requires encryption of all PHI at rest, which in Drupal includes both the database and the public/private file system.

Question 3

Which Drupal core feature helps satisfy ADA Section 508 accessibility compliance by providing alt text fields for images?

Accepted Answer

Image field with required alt text setting

Answer

Drupal's Image field has a configurable 'Required alt text' setting that enforces content editors to supply alt text, meeting Section 508 requirements.

Question 4

A Drupal site serving EU users must honor a user's 'right to erasure' under GDPR. Which module provides automated personal data deletion workflows?

Accepted Answer

GDPR Compliance

Answer

The GDPR Compliance module provides tools for managing data erasure requests and automating personal data removal workflows.

Question 5

For PCI DSS compliance on a Drupal e-commerce site, which practice is essential when handling cardholder data in forms?

Accepted Answer

Never store or transmit raw card numbers through Drupal; use tokenization via a payment gateway

Answer

PCI DSS requires that raw cardholder data never passes through your server; tokenization via a compliant payment gateway keeps Drupal out of scope.

Drupal Practice Test

Drupal Practice Test

Drupal Regulatory Frameworks & Compliance 2