Drupal Regulatory Frameworks & Compliance 3

Question 1

Which Drupal module helps site owners create and display a GDPR-compliant privacy policy with version tracking and user acceptance logging?

Accepted Answer

Legal

Answer

The Legal module displays terms and privacy policies at registration, tracks versions, and logs user acceptance timestamps for compliance auditing.

Question 2

A government Drupal site must comply with FISMA. Which security framework does FISMA mandate federal agencies use for risk management?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

FISMA requires federal agencies to implement the NIST Risk Management Framework for categorizing, selecting, implementing, and assessing security controls.

Question 3

Which Drupal configuration option prevents sensitive data from appearing in log outputs, helping meet compliance requirements around data minimization?

Accepted Answer

Configuring the 'sanitize' flag in settings.php

Answer

Setting sanitize options in settings.php (e.g., for Drush) strips passwords and sensitive fields from logs, supporting data minimization requirements.

Question 4

For SOC 2 Type II compliance, which Drupal logging capability is most relevant to satisfying the 'Availability' trust service criterion?

Accepted Answer

Watchdog error logs showing uptime incidents

Answer

SOC 2 Availability requires evidence of uptime monitoring and incident response; Drupal's watchdog error logs document system availability events.

Question 5

Which Drupal module allows administrators to define and enforce content moderation workflows that create an audit trail for regulatory compliance?

Accepted Answer

Content Moderation (core)

Answer

Drupal core's Content Moderation module provides state-machine workflows with revision tracking, creating an auditable history of content changes.

Drupal Practice Test

Drupal Practice Test

Drupal Regulatory Frameworks & Compliance 3