MENU
An organization suffered a personal data breach. The attackers gained access to their database through a user account that had unlimited access to dat
a. What should the DPO advise the organization to do in order to prevent the recurrence of similar scenarios?
Suggested Answer: A
Get Premium GDPR Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
GDPR Article 32(1)(b) emphasizes implementing access controls to ensure data security. Reviewing and restricting account permissions using the principle of least privilege (PoLP) helps prevent unauthorized access. Shared accounts (option C) increase security risks, and using cloud computing (option B) does not directly address access control vulnerabilities.
37 comments · newest first
AN
Angelo
10 months ago
Surprised they didn't have this in place already!
TA
Tamesha
10 months ago
Shared accounts? That sounds like a bad idea.
AL
Alyce
10 months ago
Cloud services won't fix poor access management.
YO
Yolande
10 months ago
Agree, unlimited access is a huge risk.
YA
Yasuko
11 months ago
Definitely need to review access controls!
CA
Carolynn
11 months ago
I feel like reviewing user account management is crucial, but I wonder if there are other factors we should consider as well.
ED
Edwin
11 months ago
I recall a practice question where shared accounts were mentioned, but I think that could actually create more problems than it solves.
HI
Hildegarde
11 months ago
I'm not entirely sure, but I think using cloud services might not directly solve the issue of user account access. It feels like a different approach.
LI
Linette
12 months ago
I remember we discussed the importance of access control systems in class. I think option A makes the most sense for preventing future breaches.
MA
Marilynn
12 months ago
I'm a bit confused on this one. Should I consider cloud computing services as an option to mitigate the risk? Or is the focus really on the access control system? I'll need to carefully analyze the question.
DE
Denise
12 months ago
Okay, I've got this. The key is to focus on the access control system and user account management. I'll make sure to thoroughly review those areas to prevent future breaches.
NU
Nu
1 year ago
Hmm, not sure about this one. I'll need to think carefully about the best approach to prevent similar data breaches in the future. Maybe I should review the access control system and user account policies.
AU
Audry
1 year ago
This seems like a straightforward question about access control and data security. I'll focus on reviewing the access control system and ensuring proper account management.
AL
Alexia
1 year ago
A is the correct answer, no doubt. But I bet the IT team is still going to try and convince the DPO to go with C. 'It's more cost-effective!'
EV
Evangelina
1 year ago
DPO: Option A is the correct choice to prevent similar scenarios.
CH
Cherry
1 year ago
IT team: We should go with option C, it's more cost-effective.
BR
Brinda
2 years ago
C? Seriously? Shared accounts are a security nightmare waiting to happen. A is the way to go.
TE
Tequila
1 year ago
B) Use cloud computing services to mitigate the risk of personal data breaches
ZO
Zona
1 year ago
C? Seriously? Shared accounts are a security nightmare waiting to happen. A is the way to go.
HO
Horace
1 year ago
A) Review if the access control system allows the creation, approval, review, and deletion of user accounts
DU
Dudley
1 year ago
B) Use cloud computing services to mitigate the risk of personal data breaches
RO
Rodolfo
1 year ago
C? Seriously? Shared accounts are a security nightmare waiting to happen. A is the way to go.
NY
Nydia
1 year ago
A) Review if the access control system allows the creation, approval, review, and deletion of user accounts
LY
Lynelle
2 years ago
Creating and using shared accounts for several users might not be a good idea as it can lead to security vulnerabilities.
LE
Lenita
2 years ago
I believe using cloud computing services could also help mitigate the risk of personal data breaches.
BA
Barbra
2 years ago
I can already hear the DPO sighing heavily at the mere suggestion of C. 'Do you want to get hacked again? No? Then we're doing A.'
RA
Raylene
1 year ago
I can already hear the DPO sighing heavily at the mere suggestion of C. 'Do you want to get hacked again? No? Then we're doing A.'
PE
Penney
1 year ago
C) Create and use shared accounts for several users in order to minimize the number of user accounts
AS
Ashlyn
1 year ago
B) Use cloud computing services to mitigate the risk of personal data breaches
MA
Maryln
2 years ago
A) Review if the access control system allows the creation, approval, review, and deletion of user accounts
AN
Annamaria
2 years ago
I agree with Ivette. It's important to ensure user accounts are created, approved, reviewed, and deleted properly.
IV
Ivette
2 years ago
I think the DPO should advise the organization to review the access control system.
RU
Ruth
2 years ago
A seems like the obvious choice here. Reviewing the access control system is key to preventing similar breaches.
AD
Adelle
1 year ago
I agree, reviewing the access control system is crucial in preventing breaches.
CA
Candida
1 year ago
C) Create and use shared accounts for several users in order to minimize the number of user accounts
MI
Micaela
1 year ago
B) Use cloud computing services to mitigate the risk of personal data breaches
WY
Wynell
1 year ago
A) Review if the access control system allows the creation, approval, review, and deletion of user accounts