HCT Security & Access Management 3

Question 1

Under GDPR, what must a HubSpot portal have configured before sending marketing emails to EU contacts?

Accepted Answer

Legitimate interest or consent legal basis recorded per contact

Answer

GDPR requires that each contact have a documented lawful basis (consent or legitimate interest) before receiving marketing communications.

Question 2

Where in HubSpot do you configure the data retention policy that automatically deletes inactive contacts after a set period?

Accepted Answer

Settings > Privacy & Consent > Data Retention

Answer

HubSpot's Privacy & Consent settings include data retention rules that automatically purge contacts who haven't engaged within a defined timeframe.

Question 3

A contact submits a 'Right to Erasure' request under GDPR. What is the correct action in HubSpot?

Accepted Answer

Delete the contact record and all associated data from the portal

Answer

The right to erasure (right to be forgotten) requires permanently deleting the contact and all their personal data from the system.

Question 4

What is the function of HubSpot's 'Consent to process' checkbox on forms?

Accepted Answer

It records explicit consent from contacts for data processing

Answer

The 'Consent to process' form field records a timestamped consent record indicating the contact agreed to have their data processed.

Question 5

Which HubSpot setting prevents forms from capturing data from contacts in countries where you lack a legal basis to process their information?

Accepted Answer

GDPR-friendly forms with required consent checkboxes

Answer

GDPR-friendly forms require explicit consent checkboxes so data is only captured when contacts actively agree to processing.

(HCT) HubSpot Certified Trainer Practice Test