Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CIPP-US topic 1 question 95 discussion

Actual exam question from IAPP's CIPP-US
Question #: 95
Topic #: 1
[All CIPP-US Questions]

If an organization maintains data classified as high sensitivity in the same system as data classified as low sensitivity, which of the following is the most likely outcome?

  • A. The organization will still be in compliance with most sector-specific privacy and security laws.
  • B. The impact of an organizational data breach will be more severe than if the data had been segregated.
  • C. Temporary employees will be able to find the data necessary to fulfill their responsibilities.
  • D. The organization will be able to address legal discovery requests efficiently without producing more information than necessary.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Abae
Highly Voted 1 year, 3 months ago
Answer: B "Holding all data in one system can increase the consequences of a single breach” Excerpt From: “IAPP_US_TB_US-Private-Sector-Privacy-3E_1.0.” Apple Books.
upvoted 9 times
...
Bhimesh
Most Recent 2 weeks, 1 day ago
Selected Answer: B
Data that is more sensitive (such as trade secrets and business plans) generally requires greater protection than other information held by the organization. It may be “segregated from less sensitive data,” through access controls that enable only authorized individuals to retrieve the data, or even kept in an entirely separate system. Option B. If all data is held in the same system, temporary or lower-level employees might gain access to sensitive data. “Holding all data in one system can INCREASE the consequences of a SINGLE BREACH.” Option A. In the United States, classification is often important for compliance purposes because of sector-specific privacy and security laws. Option D. An effective data classification system HELPS an organization address compliance audits for a particular type of data, respond to “ legal discovery requests without producing more information than necessary, and use storage resources in a cost-effective manner.”
upvoted 1 times
...
Romeokton
2 months, 3 weeks ago
Selected Answer: B
I wonder who is making the suggestions for answers, as sometimes those are ridiculous. Of course it is B.
upvoted 2 times
...
jjjrbm
5 months, 3 weeks ago
Answer B
upvoted 1 times
...
smp175
9 months, 3 weeks ago
Selected Answer: B
See Abae's explanation.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...