Discuss IAPP CIPP/E Exam Topic 4 Question 19

Under Article 30 of the GDPR, controllers are required to keep records of all of the following EXCEPT?

AIncidents of personal data breaches, whether disclosed or not.

BData inventory or data mapping exercises that have been conducted.

CCategories of recipients to whom the personal data have been disclosed.

DRetention periods for erasure and deletion of categories of personal data.
Section: (none)
Explanation

Suggested Answer: D

Get Premium CIPP/E Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Dean 1 year ago

I thought they had to keep everything! This is news to me.

Darrin 1 year ago

Yep, it's just the breaches and who gets the data.

Craig 1 year ago

Wait, are you sure about that? I thought retention periods were important too.

Bette 1 year ago

Totally agree, it's all about the breaches and disclosures!

Nada 1 year ago

Article 30 doesn't require records of retention periods.

Gwenn 1 year ago

Retention periods are definitely mentioned in the GDPR, but I wonder if they are part of the records we need to keep.

Dick 1 year ago

Categories of recipients seem important, but I can't recall if they're explicitly required under Article 30.

Lucy 1 year ago

I remember a practice question about data mapping, and I feel like that might be something we need to keep records of.

Karima 1 year ago

I think Article 30 requires keeping records of data breaches, but I'm not sure if it includes everything about them.

Precious 1 year ago

I'm pretty sure the answer is D. configTool is the tool used to configure the IBM Content Search Services server, including the port it listens on.

Yvonne 1 year ago

This question seems pretty straightforward. I think I can identify the type of security threat and the solution to mitigate it.

Quinn 1 year ago

Okay, let's see here. If a security officer violates the laws of arrest, they could potentially jeopardize the case against the subject, face criminal charges, or be held liable in a civil suit. I think the best approach is to carefully review the details of each option.

Teresita 1 year ago

My strategy here is to eliminate the options that don't seem as relevant, then choose the one that best fits the question. I'm leaning towards C or D.

Jacquelyne 1 year ago

Based on the information provided, I think the hardware-virtualized GPU option might be the most appropriate. The single physical GPU should be able to support multiple virtual machines using that method.

Merilyn 1 year ago

Okay, I think I understand the key points about VPC isolation and network configuration. I'll carefully read through the options and select the two that are correct.

IAPP CIPP/E Exam - Topic 4 Question 19 Discussion