Level 4 exam — Cybersecurity

Exam — fresh questions

12 questions to validate the data module: understanding the rules, rights and consent, everyday habits and breach response.
Answer everything, then click Check: your score and explanations will appear.

4.1 · Recall

1. What is personal data?

Any encrypted file Office software A password only Any information identifying a person (name, email, IP…)

The criterion is the identifiability of the person, directly or by cross-referencing.

4.1 · Application

2. Karim's client spreadsheet, under the rules, is…

A data processing activity subject to the rules A simple backup with no status An internal document free of rules A browsing cookie

Any operation on personal data is processing, even the small local spreadsheet.

4.1 · Application

3. Karim keeps data 'just in case', with no defined use. Which principle is breached?

Minimisation and defined purpose Disk encryption Two-factor authentication Offline backup

Collect and keep only what is necessary, for a defined purpose.

4.2 · Recall

4. Under what conditions is consent valid?

Final and irrevocable Freely given, informed, specific and unambiguous Verbal with no trace Pre-ticked and implied

A pre-ticked box is not enough; consent can be withdrawn as easily as given.

4.2 · Application

5. A client writes to Karim: 'delete my data'. What must he do?

Erase everything at once without warning Refuse to protect the company Forward the request to the DPO without delay Ignore it hoping it is forgotten

The DPO decides legal basis by legal basis; the clock starts on receipt.

4.2 · Arbitration

6. The client demands total erasure, invoices included. What to decide?

Do nothing and close the request Let the DPO decide: legally-required data is kept Negotiate a random partial erasure Erase the invoices to satisfy the client

Data needed for an obligation (invoicing, warranty) is kept: DPO decision.

4.3 · Application

7. Karim writes to twenty external clients. What is the right move?

In Cc for transparency It does not matter if the message is polite All in To to keep it simple In Bcc, field checked before sending

Bcc avoids exposing the address list in the clear — a common breach.

4.3 · Application

8. Which sharing setting for Karim's HR table?

Least access: only the people concerned Public to simplify access No control, trust is enough The whole organisation by default

Everyone only accesses the data they need (authorisation).

4.3 · Arbitration

9. A contractor asks for the client file 'to help out fast'. Karim's reply?

Send at once to avoid blocking Refuse any sharing permanently Require a defined framework (contract, secure transfer, minimisation) and have the DPO validate Send a partial copy saying nothing

Transfer to a third party = defined framework + minimisation + DPO validation, never a favour send.

4.4 · Recall

10. What is a data breach?

A simple power cut An advertising cookie Only hacking by hackers Any incident affecting personal data, including send errors

The email to the wrong recipient is a breach, not a simple blunder.

4.4 · Application

11. Karim sends the client file to the wrong recipient. First reflex?

Deny sending if questioned Try recall, ask for deletion in writing, report to the DPO at once Delete the sent message and stay silent Wait until Monday to disturb nobody

Act fast then report: immediate reporting leaves time to analyse and notify.

4.4 · Arbitration

12. Karim hesitates to report his own mistake fearing punishment. What to tell him?

Wait to see if anyone notices Erase all trace of the send Report at once: a reported error is managed, concealment is the real fault Stay silent: admitting always makes it worse

Healthy organisations value fast reporting and punish concealment.

What's next?

Score ≥ 80%: move to Level 5 — reacting to an incident, reporting and alerting, IT charter and security culture.
Score 50-79%: review the failed sections (basics 4.1, rights 4.2, daily 4.3, breach 4.4), re-read the explanations above, then retake the test.
Score < 50%: restart the level from 4.1 with the inventory sheet and the 4 habits, then retry the exam with a fresh mind.