Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 101:

  Which of the following should an IT privacy practitioner review FIRST to understand where personal data is coming from and how it is used within the organization?

  A. Data process flow diagrams
  B. Data classification
  C. Data collection standards
  D. Data inventory
  C. Data collection standards

• Question 102:

  The identification of all data recipients in a privacy notice to website visitors reflects which privacy principle?

  A. Accuracy
  B. Consent
  C. Integrity
  D. Transparency
  B. Consent

• Question 103:

  Which of the following BEST demonstrates that security considerations are embedded in DevOps operations for application development?

  A. The compliance team is involved in both pre-implementation and post-implementation stages.
  B. Application hardening is performed before rollout of the application.
  C. Code review is conducted during the software development life cycle (SDLC).
  D. The engineering team has been trained on security and privacy policies.
  B. Application hardening is performed before rollout of the application.

• Question 104:

  A data subject has requested the personal data an organization has collected on them. Which of the following should be done FIRST when responding to this request?

  A. Verity the identity of the requestor.
  B. Determine the legal validity of the request.
  C. Verify which rights are involved in the request.
  D. Determine whether other parties' privacy may be impacted.
  A. Verity the identity of the requestor.

• Question 105:

  An email opt-in form on a website applies to which privacy principle?

  A. Accuracy
  B. Consent
  C. Transparency
  D. Integrity
  B. Consent

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/an-ethical-approach-to-data-privacy-protection

• Question 106:

  Which of the following would BEST enable a data warehouse to limit access to individual database objects?

  A. Private storage volumes
  B. Virtual private database
  C. Database privacy firewall
  D. Data control dictionary
  D. Data control dictionary

• Question 107:

  Which of the following is the BEST way to address threats to mobile device privacy when using beacons as a tracking technology?

  A. Disable location services.
  B. Enable Trojan scanners.
  C. Enable antivirus for mobile devices.
  D. Disable Bluetooth services.
  A. Disable location services.

• Question 108:

  A retail company handles payroll accounting for its employees through a Software as a Service (SaaS) provider that uses a data center operator as a subcontractor. Who is responsible for the protection of the employees' personal data?

  A. The SaaS provider
  B. The external auditing firm
  C. The retail company
  D. The data center operator
  A. The SaaS provider

• Question 109:

  Which of the following is the MOST effective remote access model for reducing the likelihood of attacks originating from connecting devices?

  A. Remote wide area network (WAN) links
  B. Thin client remote desktop protocol (RDP)
  C. Site-to-site virtual private network (VPN)
  D. Thick client desktop with virtual private network (VPN) connection
  C. Site-to-site virtual private network (VPN)

  ---

  Explanation/Reference:

• Question 110:

  To ensure security when accessing personal data from a corporate website, which of the following is a prerequisite to implementing Hypertext Transfer Protocol Secure (HTTPS)?

  A. Virtual private network (VPN)
  B. Load balancer
  C. Firewall
  D. Transport Layer Security (TLS)
  D. Transport Layer Security (TLS)