Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 181:

  Which of the following is an IT privacy practitioner's BEST recommendation to reduce privacy risk before an organization provides personal data to a third party?

  A. Tokenization
  B. Aggregation
  C. Anonymization
  D. Encryption
  C. Anonymization

• Question 182:

  Before executive leadership approves a new data privacy policy, it is MOST important to ensure:

  A. a training program is developed.
  B. a privacy committee is established.
  C. a distribution methodology is identified.
  D. a legal review is conducted.
  B. a privacy committee is established.

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/news-and-trends/industry-news/2021/pakistans-cybersecurity-policy-in-2021-a-review

• Question 183:

  Which of the following techniques mitigates design flaws in the application development process that may contribute to potential leakage of personal data?

  A. User acceptance testing (UAT)
  B. Patch management
  C. Software hardening
  D. Web application firewall (WAF)
  A. User acceptance testing (UAT)

• Question 184:

  Which of the following tracking technologies associated with unsolicited targeted advertisements presents the GREATEST privacy risk?

  A. Online behavioral tracking
  B. Radio frequency identification (RFID)
  C. Website cookies
  D. Beacon-based tracking
  C. Website cookies

• Question 185:

  Which of the following is the BEST way to ensure privacy considerations are included when working with vendors?

  A. Including privacy requirements in the request for proposal (RFP) process
  B. Monitoring privacy-related service level agreements (SLAs)
  C. Including privacy requirements in vendor contracts
  D. Requiring vendors to complete privacy awareness training
  C. Including privacy requirements in vendor contracts

• Question 186:

  A web-based payment service is adding a requirement for biometric authentication. Which risk factor is BEST mitigated by this practice?

  A. User validation failures when reconnecting after lost sessions
  B. Zero-day attacks and exploits
  C. Identity spoofing by unauthorized users
  D. Legal liability from the misuse of accounts
  C. Identity spoofing by unauthorized users

• Question 187:

  The BEST way to ensure the integrity of an organization's data is to log and review which of the following?

  A. Network access
  B. Patch updates
  C. Data modifications
  D. Data types
  C. Data modifications

• Question 188:

  An online retailer has recently acquired a travel company and is planning to share its retail customer database with the new company for marketing purposes. Which data protection principle is at GREATEST risk of being violated?

  A. Data portability
  B. Data integrity
  C. Data use limitation
  D. Data transparency
  C. Data use limitation

• Question 189:

  Which type of data is produced by using a more complex method of analytics to find correlations between data sets and using them to categorize or profile people?

  A. Derived data
  B. Observed data
  C. Inferred data
  D. Provided data
  C. Inferred data

• Question 190:

  A technology company has just launched a mobile application for tracking health symptoms. This application is built on a mobile device technology stack that allows users to share their location and details of their symptoms. Which of the following is the GREATEST privacy concern with collecting this data via mobile devices?

  A. Client-side device ID
  B. Data storage requirements
  C. Encryption of key data elements
  D. Data usage without consent
  D. Data usage without consent