Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 131:

  Which of the following should be considered personal information?

  A. Biometric records
  B. Company address
  C. University affiliation
  D. Age
  A. Biometric records

• Question 132:

  Which of the following is defined and implemented to ensure organizational data privacy protection arrangements are maintained and enforced regardless of jurisdiction?

  A. Rules for data subject requests
  B. Binding corporate rules
  C. Privacy notice and consent rules D. Rules for managing complaints
  C. Privacy notice and consent rules D. Rules for managing complaints

• Question 133:

  Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?

  A. Conducting a PIA requires significant funding and resources.
  B. PIAs need to be performed many times in a year.
  C. The organization lacks knowledge of PIA methodology.
  D. The value proposition of a PIA is not understood by management.
  D. The value proposition of a PIA is not understood by management.

  ---

  Explanation/Reference:

  Reference: https://ico.org.uk/media/1042196/trilateral-full-report.pdf

• Question 134:

  Which of the following is the FIRST step toward the effective management of personal data assets?

  A. Minimize personal data.
  B. Establish data security controls.
  C. Create a personal data inventory.
  D. Analyze metadata.
  C. Create a personal data inventory.

• Question 135:

  An organization's new sales application asks for consent to collect consumer personal information. Which foundational privacy by design principle is this organization following?

  A. Respecting user privacy
  B. Maintaining visibility and transparency
  C. Embedding privacy into system requirements
  D. Ensuring end-to-end security
  A. Respecting user privacy

• Question 136:

  What is the BEST method for protecting data transmissions to devices in the field?

  A. Multi-factor authentication
  B. Transport Layer Security (TLS)
  C. Application level authentication
  D. Hypertext Transfer Protocol Secure (HTTPS)
  D. Hypertext Transfer Protocol Secure (HTTPS)

• Question 137:

  Which of the following is the BEST example of risk-based data protection?

  A. Data encryption
  B. Data segmentation
  C. Transit-layer encryption
  D. Data partitioning
  B. Data segmentation

• Question 138:

  Which of the following is a responsibility of the audit function in helping an organization address privacy compliance requirements?

  A. Approving privacy impact assessments (PIAs)
  B. Validating the privacy framework
  C. Managing privacy notices provided to customers
  D. Establishing employee privacy rights and consent
  D. Establishing employee privacy rights and consent

• Question 139:

  Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?

  A. Limited functions and capabilities of a secured operating environment
  B. Monitored network activities for unauthorized use
  C. Improved data integrity and reduced effort for privacy audits
  D. Unlimited functionalities and highly secured applications
  B. Monitored network activities for unauthorized use

• Question 140:

  An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

  A. Encrypt users' information so it is inaccessible to the marketing department.
  B. Reference the privacy policy to see if the data is truly restricted.
  C. Remove users' information and accounts from the system.
  D. Flag users' email addresses to make sure they do not receive promotional information.
  C. Remove users' information and accounts from the system.