Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 91:

  Which of the following is the GREATEST benefit of adopting data minimization practices?

  A. Storage and encryption costs are reduced.
  B. Data retention efficiency is enhanced.
  C. The associated threat surface is reduced.
  D. Compliance requirements are met.
  B. Data retention efficiency is enhanced.

  ---

  Explanation/Reference:

  Unfortunately, the financial liability portion of retained personal information rarely shows up on an organization's financial balance sheet. And yet it is indeed a liability: the impact on an organization when cybercriminals steal that information or when the information is misused is real, in the form of breach response costs, the costs related to reducing harm inflicted on affected parties (think of credit monitoring services, a frequent remedy for stolen credit card numbers), fines from governmental regulators, and the occasional class-action lawsuit.

• Question 92:

  Which of the following is the BEST indication of an effective records management program for personal data?

  A. Archived data is used for future analytics.
  B. The legal department has approved the retention policy.
  C. All sensitive data has been tagged.
  D. A retention schedule is in place.
  D. A retention schedule is in place.

• Question 93:

  Which of the following processes BEST enables an organization to maintain the quality of personal data?

  A. Implementing routine automatic validation
  B. Maintaining hashes to detect changes in data
  C. Encrypting personal data at rest
  D. Updating the data quality standard through periodic review
  D. Updating the data quality standard through periodic review

• Question 94:

  When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?

  A. Data classification labeling
  B. Data residing in another country
  C. Volume of data stored
  D. Privacy training for backup users
  A. Data classification labeling

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/isaca-journal/past-issues/2014/selecting-the-right-cloud-operating-model-privacy-and-data-security-in-the-cloud

• Question 95:

  Which of the following is the GREATEST concern with using degaussing to destroy personal data?

  A. It is difficult to verify data destruction.
  B. It takes a long time to destroy the data.
  C. The drive can be reused for future storage.
  D. The interconnected equipment of the hard drive is preserved.
  A. It is difficult to verify data destruction.

• Question 96:

  To increase productivity, an organization is planning to implement movement tracking devices in the vehicles of field employees. Which of the following MUST be in place before installing the devices?

  A. Bring your own device (BYOD) policy
  B. Mobile device management (MDM)
  C. Location accuracy mechanisms
  D. End user agreements
  A. Bring your own device (BYOD) policy

  ---

  Explanation/Reference:

• Question 97:

  Which types of controls need to be applied to ensure accuracy at all stages of processing, storage, and deletion throughout the data life cycle?

  A. Processing flow controls
  B. Time-based controls
  C. Purpose limitation controls
  D. Integrity controls
  D. Integrity controls

  ---

  Explanation/Reference:

  Reference: https://www.talend.com/resources/what-is-data-integrity/

• Question 98:

  Which of the following vulnerabilities is MOST effectively mitigated by enforcing multi-factor authentication to obtain access to personal information?

  A. End users using weak passwords
  B. Organizations using weak encryption to transmit data
  C. Vulnerabilities existing in authentication pages
  D. End users forgetting their passwords
  A. End users using weak passwords

• Question 99:

  Which of the following BEST prevents users from sending out customers' personal data without encryption?

  A. Data loss prevention (DLP) tools
  B. De-identification of data
  C. Automatic email blocking
  D. User behavior monitoring
  B. De-identification of data

  ---

  Explanation/Reference:

• Question 100:

  Which of the following is MOST important to consider when setting priorities for privacy data management objectives?

  A. IT portfolios
  B. Industry benchmarks
  C. Business strategies
  D. Technical vulnerabilities
  D. Technical vulnerabilities