MENU
Classify the following scenario as major or minor non-conformity.
''The organization is aware of the PI dealt by it at a broad level based on the business services provided but does not have the detailed view of which business functions, processes or relationships deal with what types of PI including usage, access, transmission, storage, etc.''
Suggested Answer: A
Get Premium DCPLA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
17 comments · newest first
BE
Benedict
10 months ago
Definitely major, they need to get their act together!
MA
Malcom
11 months ago
Wait, how can they not know the specifics of their PI? That's surprising!
SU
Sue
11 months ago
I think it could be minor if they have some controls in place.
MA
Maira
11 months ago
I agree, not having detailed views is a big issue.
JU
Justa
11 months ago
Sounds like a major non-conformity to me.
SH
Shawna
12 months ago
I lean towards major non-conformity because the organization should have a clear understanding of PI usage and access.
GW
Gwen
12 months ago
This feels like it could be both major and minor, depending on the impact on data security.
JA
Janessa
12 months ago
I'm not entirely sure, but I remember a practice question where lack of detailed processes was considered minor.
LY
Lynette
1 year ago
I think this could be a major non-conformity since not having a detailed view of PI handling seems pretty serious.
BU
Buddy
1 year ago
I'm feeling a bit confused by this question. The scenario doesn't seem to clearly indicate whether this is a major or minor non-conformity. I'll need to re-read it a few times and think through the potential implications before making a decision.
JE
Jessenia
1 year ago
This is a tricky one. The lack of detailed visibility on PI usage, access, transmission, and storage seems like it could be a significant issue. I'm leaning towards classifying this as a major non-conformity, but I'll double-check my reasoning.
EL
Elfrieda
1 year ago
Okay, let me break this down step-by-step. The organization has a general understanding of the PI it deals with, but lacks the specifics on which business functions, processes, and relationships handle different types of PI. I think this could be considered a minor non-conformity.
LA
Laticia
1 year ago
This seems like a straightforward question. I'll read through the scenario carefully and think about the key details to determine if it's a major or minor non-conformity.
LA
Lamar
1 year ago
Hmm, I'm a bit unsure about this one. The scenario mentions the organization is aware of the PI at a broad level, but doesn't have detailed visibility. I'll need to think through the implications of that to decide if it's major or minor.
GL
Glory
1 year ago
Okay, I think I've got a good handle on this. Option D looks like the best approach - using DAX and provisioned capacity with auto-scaling should give us the performance and cost optimization we need.
DE
Dewitt
1 year ago
Okay, based on my understanding of Cisco Spark, the Enterprise settings likely control how the platform integrates with other systems, like for hybrid deployments or API access. So I'm leaning towards option B or D.
BR
Brock
1 year ago
I think I know this one. The FIPS 199 formula pairs the three security objectives (confidentiality, integrity, availability) with their corresponding impact levels. Option C looks like the right match for that.