IGP Technology & Information Security 5

Question 1

In an IG program, what is the primary purpose of a data map or data inventory?

Accepted Answer

Catalog where personal and sensitive data is created, stored, used, and shared

Answer

A data map catalogs the full lifecycle of data — where it originates, how it flows, where it is stored, and who accesses it — enabling effective governance and risk management.

Question 2

Which security principle ensures that no single individual can complete a critical process alone, reducing fraud risk?

Accepted Answer

Separation of duties

Answer

Separation of duties requires that critical tasks be divided among multiple individuals, so no single person can both initiate and approve a transaction or action.

Question 3

An organization receives a ransomware attack that encrypts all files on a shared drive. Which backup strategy would BEST minimize data loss?

Accepted Answer

Daily incremental backups stored offline or in an isolated environment

Answer

Daily incremental backups stored offline or in an air-gapped environment ensure minimal data loss and prevent ransomware from encrypting backup copies.

Question 4

Under the GDPR, what right allows individuals to request that their personal data be erased?

Accepted Answer

Right to erasure (right to be forgotten)

Answer

Article 17 of the GDPR grants individuals the right to erasure, allowing them to request deletion of their personal data under specific circumstances.

Question 5

What is the purpose of a Certificate Revocation List (CRL) in a PKI environment?

Accepted Answer

Identify digital certificates that have been invalidated before their expiration date

Answer

A CRL is a list maintained by a Certificate Authority that contains serial numbers of certificates revoked due to compromise, policy violations, or other reasons.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Technology & Information Security 5