Exam CIPT topic 1 question 105 discussion

C. Whether consent is durably recorded in the case of a server crash: This involves not just reviewing code but also assessing how the system handles data persistence and recovery. A code audit alone may not be able to fully test the durability of consent records in scenarios involving server crashes or other failure conditions. This requires more comprehensive testing of the system’s data storage and recovery mechanisms beyond just code inspection.

The option that CANNOT be effectively determined during a code audit is C. Whether consent is durably recorded in the case of a server crash. A code audit can review the code to check for access control logic (A), data sharing practices (B), and the implementation of differential privacy (D). However, whether consent is durably recorded in the case of a server crash © is more of a system resilience and data durability issue, which typically involves infrastructure and system design rather than just the code itself. This would be better evaluated through system testing and review of infrastructure design rather than a code audit. It’s also worth noting that the durability of consent recording in the event of a server crash would also depend on factors like backup and recovery strategies, which are outside the scope of a code audit.