You save $69.98
Management implemented a response after this event: Contractors carry unencrypted removable drives containing internal designs between sites. The response was: Restrict portable-media authorization and require managed encryption and custody records. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A lost-media exercise verifies encryption status, owner assignment and incident escalation. Physical portability magnifies loss and disclosure exposure beyond ordinary workstation storage.
Asset tracking alone does not prove protection or custody of the contents.
Training acceptance is not operational evidence of managed custody.
A UI indicator alone cannot establish enforceable encryption and incident response readiness.
A cloud processor proposes reusing a customer's personal records for its own advertising campaign. What is the security manager's BEST governance response?
A processor's service access does not create independent authority to determine new purposes.
Encryption does not create legal authorization to change processing purpose.
Infrastructure custody does not automatically confer controller purpose authority.
Removing the agreed instructions weakens rather than strengthens governance.
A processor follows the approved purpose and contract. Which remaining risk MOST requires attention?
Contracted primary processing still requires subprocessor authorization and data-flow oversight.
Employment role does not determine who sets processing purposes and means.
Cryptography does not erase jurisdictional or contractual obligations.
Processing under documented controller instructions is permissible within applicable requirements.
Which evidence BEST demonstrates a processor is honoring controller instructions?
Tests connect observed operations and recipients with authority granted by the controller.
Marketing language cannot prove adherence to documented controller instructions.
Capacity does not establish processing purpose, recipient restrictions or lawful authority.
A generic promise cannot trace actual processing or onward transfers to controller approvals.
A loan platform retains applicant identity documents indefinitely after the approved retention period has elapsed. A small subset is under legal hold. What lifecycle control is MOST appropriate?
Retention minimization limits exposure and fulfills business/legal obligations; a legitimate hold suspends routine disposal only for covered evidence.
Broad indiscriminate deletion can violate preservation obligations and destroy necessary evidence.
A narrowly scoped preservation duty does not justify unlimited storage of unrelated sensitive data.
At-rest encryption is not a substitute for necessary disposal and purpose-limited retention.
A records team implements automated deletion after legal retention, excluding named cases under active litigation hold. What governance risk still needs periodic review?
Legal holds should prevent destruction of necessary evidence without becoming indefinite unbounded retention for all affected records.
The active preservation obligation can override ordinary retention expiry for specifically in-scope data.
A hold requires authorized administration and eventual release decisions rather than automatic permanence.
Encryption reduces disclosure risk but does not eliminate collection, retention or disposal duties.
A company claims its applicant-data retention program properly deletes expired records and preserves litigation evidence. Which audit sample BEST proves this?
A two-sided audit proves both disposal of unnecessary sensitive data and non-destruction of held evidence.
A capacity trend cannot demonstrate record-level compliance with differing legal obligations.
One deletion test covers only disposal, not the equally binding preservation exception.
Avoiding destruction entirely defeats data minimization and does not prove normal expiry controls operate.
An AI model combines regulated records from five sources and cannot identify the original consent or data owners. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Lineage links derived information to owners, purposes and applicable restrictions. A dataset name alone cannot prove purpose eligibility after transformations.
Derived datasets can still reveal protected people or retain purpose and provenance obligations.
One label cannot reconstruct source consent, contractual limits or transformations.
Broad access does not establish source eligibility and increases exposure during experiments.
The organization implemented the response to this scenario: An AI model combines regulated records from five sources and cannot identify the original consent or data owners. The approved response was: Record provenance and transformations through the data lifecycle before reusing the output. Which statement MOST accurately identifies a remaining risk or constraint?
Lineage links derived information to owners, purposes and applicable restrictions. A sampled prediction input can be traced back to its authorized source and processing purpose.
A filename is not a chain of origin, consent and transformation evidence.
Purpose and processing restrictions may persist after transformation and partial deidentification.
Lineage is required to apply source-specific legal and contractual obligations.
Management implemented a response after this event: An AI model combines regulated records from five sources and cannot identify the original consent or data owners. The response was: Record provenance and transformations through the data lifecycle before reusing the output. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A sampled prediction input can be traced back to its authorized source and processing purpose. Lineage links derived information to owners, purposes and applicable restrictions.
Model accuracy says nothing about data origin and authorized processing.
A label cannot establish consent, owner decisions or processing eligibility.
A source count is not end-to-end provenance traceability.
A SaaS backup job silently copies EU customer data to a region outside its approved data map. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Residency includes backups and operational derivatives, not merely the primary database. Region pinning may not govern external support exports or vendor subprocessors.
A residency decision must cover operational derivatives, not just the main datastore.
A generic hosting claim cannot verify the actual location of all regulated copies.
Confidentiality controls cannot replace geographic and transfer authorization.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
