GRC GRC Data Privacy and Information Governance 2

Question 1

Which of the following best describes a Privacy Impact Assessment (PIA)?

Accepted Answer

A systematic process for evaluating privacy risks of a new system or process

Answer

A PIA is a structured analysis used to identify and mitigate privacy risks before deploying a new project, system, or business process involving personal data.

Question 2

Which data classification level typically requires the highest level of security controls within a U.S. enterprise GRC framework?

Accepted Answer

Restricted/Top Secret

Answer

Restricted or Top Secret data classification represents the most sensitive information and mandates the strictest access and protection controls.

Question 3

The role of a Data Protection Officer (DPO) under privacy regulations is to:

Accepted Answer

Oversee compliance with data protection laws and serve as a point of contact for regulators

Answer

A DPO is responsible for monitoring internal compliance with data protection requirements and acts as the primary liaison with data protection authorities.

Question 4

Which principle ensures that individuals can obtain their personal data in a usable format and transfer it to another service provider?

Accepted Answer

Data portability

Answer

Data portability is the right that allows individuals to receive their personal data in a structured, commonly used format and move it between services.

Question 5

In a GRC context, 'data lineage' refers to:

Accepted Answer

Tracking the origin, movement, and transformation of data through its lifecycle

Answer

Data lineage documents where data comes from, how it moves through systems, and how it is transformed, supporting auditability and compliance.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC GRC Data Privacy and Information Governance 2