Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 171:

  Which of the following is the MOST important consideration to ensure privacy when using big data analytics?

  A. Maintenance of archived data
  B. Disclosure of how the data is analyzed
  C. Transparency about the data being collected
  D. Continuity with business requirements
  C. Transparency about the data being collected

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/an-ethical-approach-to-data-privacy-protection

• Question 172:

  Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

  A. For the purpose of medical research
  B. A forthcoming campaign to win back customers
  C. A required retention period due to regulations
  D. Ease of onboarding when the customer returns
  C. A required retention period due to regulations

• Question 173:

  Which of the following is MOST important to include when defining an organization's privacy requirements as part of a privacy program plan?

  A. Data classification process
  B. Privacy management governance
  C. Privacy protection infrastructure
  D. Lessons learned documentation
  C. Privacy protection infrastructure

• Question 174:

  Which of the following BEST ensures an organization's data retention requirements will be met in the public cloud environment?

  A. Service level agreements (SLAs)
  B. Cloud vendor agreements
  C. Data classification schemes
  D. Automated data deletion schedules
  A. Service level agreements (SLAs)

• Question 175:

  A project manager for a new data collection system had a privacy impact assessment (PIA) completed before the solution was designed. Once the system was released into production, an audit revealed personal data was being collected that was not part of the PIA. What is the BEST way to avoid this situation in the future?

  A. Conduct a privacy post-implementation review.
  B. Document personal data workflows in the product life cycle.
  C. Incorporate privacy checkpoints into the secure development life cycle.
  D. Require management approval of changes to system architecture design.
  D. Require management approval of changes to system architecture design.

• Question 176:

  Within a business continuity plan (BCP), which of the following is the MOST important consideration to ensure the ability to restore availability and access to personal data in the event of a data privacy incident?

  A. Offline backup availability
  B. Recovery time objective (RTO)
  C. Recovery point objective (RPO)
  D. Online backup frequency
  A. Offline backup availability

• Question 177:

  Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?

  A. Perform a privacy risk audit.
  B. Conduct a privacy risk assessment.
  C. Validate a privacy risk attestation.
  D. Conduct a privacy risk remediation exercise.
  B. Conduct a privacy risk assessment.

• Question 178:

  Which of the following is the BEST way to manage different IT staff access permissions for personal data within an organization?

  A. Mandatory access control
  B. Network segmentation
  C. Dedicated access system
  D. Role-based access control
  D. Role-based access control

  ---

  Explanation/Reference:

  Reference: https://www.imperva.com/learn/data-security/role-based-access-control-rbac/

• Question 179:

  A data subject's ability to securely obtain and reuse personal data for their own purposes across different services is known as the right to:

  A. data portability.
  B. data sanitization.
  C. data limitation.
  D. data protection.
  A. data portability.

• Question 180:

  Which of the following is the MOST effective approach to identify personal data stored as unstructured data?

  A. Use data discovery tools.
  B. Review downloads from databases.
  C. Query application developers.
  D. Survey users and data owners.
  A. Use data discovery tools.

  ---

  Explanation/Reference: