Customer-facing applications must comply with Global Data Protection Regulations (GDPR). You need to recommend actions to help ensure GDPR compliance. Which two features should the company use? Each…

Question

Options

• AForce a user to update security questions after a specific amount of time.
• BPrompt a user for consent to use their personal data and record the date consented.
• CBlock users who are identified as minors.
• DAutomatically deactivate a user who has not used the portal in six months.

• A
  8% (4)
• B
  77% (37)
• D
  15% (7)

Explanation

GDPR mandates two things relevant here: (1) obtaining and recording explicit user consent before processing personal data (Article 6/7), making option B correct; and (2) special protections for minors (Article 8), which requires verifiable parental consent for children under 16, so blocking unverified minors (C) is a valid compliance measure. Option A (rotating security questions) is a general security practice unrelated to GDPR. Option D (deactivating inactive users) is a security hygiene measure, not a GDPR requirement.

No community discussion yet for this question.