Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 121:

  Which of the following controls BEST mitigates the risk of unauthorized access to personal information via brute force attacks through application programming interfaces (APIs)?

  A. Authentication controls
  B. Sufficient logging
  C. Object level authorization
  D. Mass assignment
  A. Authentication controls

• Question 122:

  Which of the following BEST facilitates an organization's ability to achieve data privacy-related goals?

  A. Implementing a data quality governance process
  B. Implementing a detailed system of records process
  C. Developing a clear data forensics process
  D. Designing a robust data loss prevention (DLP) process
  A. Implementing a data quality governance process

  ---

  Explanation/Reference:

• Question 123:

  Which of the following is the BEST approach for configuring remote access rules to safeguard personal data within the organization's network?

  A. Encrypting personal data
  B. Using a third-party remote server
  C. Installing endpoint security
  D. Enabling strict authentication
  D. Enabling strict authentication

• Question 124:

  Which of the following approaches to incorporating privacy by design principles BEST ensures the privacy of personal information?

  A. Embedding the principles into remediation data procedures
  B. Including the principles in reactive data breach plans
  C. Building the principles into final data product developments
  D. Implementing the principles into the end-to-end data life cycle
  D. Implementing the principles into the end-to-end data life cycle

  ---

  Explanation/Reference:

• Question 125:

  Which of the following is the MOST important privacy consideration for video surveillance in high security areas?

  A. Video surveillance recordings may only be viewed by the organization.
  B. There is no limitation for retention of this data.
  C. Video surveillance data must be stored in encrypted format.
  D. Those affected must be informed of the video surveillance.
  C. Video surveillance data must be stored in encrypted format.

• Question 126:

  A privacy impact assessment (PIA) is BEST performed by reviewing controls:

  A. in best practices frameworks.
  B. for identity and access management.
  C. based on vulnerability assessments.
  D. throughout the technology stack.
  D. throughout the technology stack.

• Question 127:

  Which of the following rights is an important consideration that allows data subjects to request the deletion of their data?

  A. The right to object
  B. The right to withdraw consent
  C. The right to access
  D. The right to be forgotten
  D. The right to be forgotten

  ---

  Explanation/Reference:

  Reference: https://en.wikipedia.org/wiki/Right_to_be_forgotten

• Question 128:

  Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?

  A. Access is logged on the virtual private network (VPN).
  B. Multi-factor authentication is enabled.
  C. Active remote access is monitored.
  D. Access is only granted to authorized users.
  D. Access is only granted to authorized users.

• Question 129:

  Which of the following hard drive sanitation methods provides an organization with the GREATEST level of assurance that data has been permanently erased?

  A. Degaussing the drive
  B. Factory resetting the drive
  C. Crypto-shredding the drive
  D. Reformatting the drive
  A. Degaussing the drive

  ---

  Explanation/Reference:

  Reference: https://allgreenrecycling.com/what-is-data-destruction/

• Question 130:

  Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?

  A. The user's ability to select, filter, and transform data before it is shared
  B. Umbrella consent for multiple applications by the same developer
  C. User consent to share personal data
  D. Unlimited retention of personal data by third parties
  C. User consent to share personal data