In relation to cyber security, what would be the benefit of a public sector organisation joining a Group Purchasing Organisation (GPO)?
Correct Answer: C
A GPO is the same as a Buying Consortium—it’s when multiple organisations pool resources and procure together. The GPO/Consortium does the legwork for procurement activities such as vetting suppliers. This is one advantage of using them—they have the expertise to weed out unsuitable suppliers. Option A is a true statement but doesn’t relate to cyber security. P.167
Domain: 3.1
Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn’t being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.
What is the main legal concern regarding the data?
Correct Answer: C
Compliance with GDPR is the main legal concern. The key word in the question is legal.
Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn’t being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.
What is the main concern with regards to the quality of data currently held?
Correct Answer: A
This is commission—data has been created (commissioned) by mistake, leading to multiple entries for the same thing.
In order to keep data secure, which three things should be considered?
Correct Answer: D
This is the CIA triangle which is from p.143. The three aspects are the three corners of the triangle. Remember this one for the exam as I’ve heard it comes up frequently. Just remember data security = CIA = confidentiality, integrity and availability.
Domain: 3.1





Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.
Please contact info@Prep2Certs.com and we will provide you with alternative payment options.
You can by Contacting our sales team.