Exam CIPT topic 1 question 101 discussion

D. Validation of users with unauthenticated identifiers (e.g., IP address, physical address). Data portability rights generally involve authenticated requests and proper consent mechanisms, not validation based on unauthenticated identifiers.

The option that is NOT relevant to a user exercising their data portability rights is D. Validation of users with unauthenticated identifiers (e.g. IP address, physical address). Data portability rights, as defined by regulations like the General Data Protection Regulation (GDPR), allow individuals to obtain and reuse their personal data across different services. This involves securely transferring, copying, or moving data without hindrance to its usability. While notice and consent for downloading data (A), detection of phishing attacks against the portability interface (B), and re-authentication of an account, including two-factor authentication as appropriate ©, are all relevant to ensuring the secure and compliant exercise of data portability rights, validating users with unauthenticated identifiers like IP or physical addresses (D) is not directly relevant

B its B

B , something related to SD Portability, in relation to software, is a measure of how easily an application can be transferred from one computer environment to another. A computer software application is considered portable to a new environment if the effort required to adapt it to the new environment is within reasonable limits. The meaning of the abstract term 'reasonable' depends upon the nature of the application and is often difficult to express in quantifiable units.

It should be B and D in case of a multiple choice situation. D is only plausible on a "no-login" strategy. It requires more technology to validate but it is possible to implement. B is just bizarre. No user would ever ask for a report like that to exercise their rights.

I am between "B" and "D". I think the question is asking for a user that is interested in "data portability" which is basically the ability to move data to somewhere else, which would NOT be useful/relevant to this user. I this "B" is NOT useful to the end-user since it should affect the company more so than the user?

Can someone explain?