mediumMultiple ChoiceObjective-mapped
CAS-004 Practice Question: A multinational corporation must comply with…
A multinational corporation must comply with GDPR, CCPA, and LGPD. The CISO proposes a unified data classification policy. Which approach best minimizes compliance conflicts?
⚠ Common exam trap
CompTIA often tests the misconception that adopting the strictest single regulation (GDPR) is sufficient, but the trap is that each regulation has unique requirements (e.g., CCPA’s right to opt out of sale, LGPD’s appointment of a DPO under Article 41) that must be explicitly addressed in a unified policy to avoid compliance gaps.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a unified policy meeting the most stringent requirements of all three regulations
A unified policy that meets the most stringent requirements of GDPR, CCPA, and LGPD ensures baseline compliance across all jurisdictions without violating any regulation. This approach minimizes conflicts by harmonizing data classification rules, such as consent management and data subject rights, under the highest common denominator, which is GDPR for most provisions like explicit consent and 72-hour breach notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Adopt a unified policy based on GDPR as the strictest regulation
Why it's wrong here
While GDPR is strict, LGPD and CCPA have distinct requirements that must be addressed.
- ✓
Create a unified policy meeting the most stringent requirements of all three regulations
Why this is correct
A unified baseline using the most restrictive elements ensures compliance with all three.
- ✗
Use a single policy based on the company's country of incorporation
Why it's wrong here
This ignores the requirements of other jurisdictions where data subjects reside.
- ✗
Implement separate policies for each regulation
Why it's wrong here
Separate policies introduce administrative overhead and potential conflicts.
Go deeper
Related to this question
About these practice questions
This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.