ITPEC IP April 2025 Question 36
ITPEC IP April 2025 — Question 36 of 100
C and D are appropriate — securely destroy discarded media and encrypt stored personal data.
C prevents recovery of the contact list from the discarded CD-ROM by physically shredding it. D protects confidentiality if the stored file is accessed or copied without authorization. A is false because, after verifying identity and following applicable procedures, a person can generally request access to their own registered information. B is false because sending the complete list discloses every customer's data to all other customers.
Answer (d)
Why not others: (a) includes A; (b) includes both A and B; (c) includes B. Each therefore contains an inappropriate disclosure rule.
Key rule: Apply least disclosure, identity verification, encryption at rest, and irreversible disposal to personal information throughout its lifecycle.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.