Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 191:

  Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

  A. To assess privacy risks
  B. To evaluate effectiveness of data controls
  C. To determine data integration gaps
  D. To comply with regulations
  A. To assess privacy risks

• Question 192:

  At a minimum, records metadata in data retention files should include:

  A. the record creator.
  B. the record version history.
  C. the record creation date.
  D. the record event date.
  C. the record creation date.

• Question 193:

  A global financial institution is implementing data masking technology to protect personal data used for testing purposes in non-production environments. Which of the following is the GREATEST challenge in this situation?

  A. Access to personal data is not strictly controlled in development and testing environments.
  B. Complex relationships within and across systems must be retained for testing.
  C. Personal data across the various interconnected systems cannot be easily identified.
  D. Data masking tools are complex and difficult to implement.
  A. Access to personal data is not strictly controlled in development and testing environments.

• Question 194:

  Which of the following is the BEST approach when providing data subjects with access to their personal data?

  A. Use an email address to automatically generate a unique ID.
  B. Create a profile page where users can view their information.
  C. Disable user profile data modification so there is no possibility to introduce mistakes.
  D. Only allow users to edit data fields that are not derived from their personal information.
  B. Create a profile page where users can view their information.

• Question 195:

  Which of the following should be used to address data kept beyond its intended lifespan?

  A. Data minimization
  B. Data anonymization
  C. Data security
  D. Data normalization
  A. Data minimization

  ---

  Explanation/Reference:

  Reference: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/principles/data-minimisation/

• Question 196:

  Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

  A. Use a third party to collect, store, and process the data.
  B. Collect data through a secure organizational web server.
  C. Collect only the data necessary to meet objectives.
  D. Aggregate the data immediately upon collection.
  C. Collect only the data necessary to meet objectives.

• Question 197:

  What is the BEST way for an organization to maintain the effectiveness of its privacy breach incident response plan?

  A. Require security management to validate data privacy security practices.
  B. Involve the privacy office in an organizational review of the incident response plan.
  C. Hire a third party to perform a review of data privacy processes.
  D. Conduct annual data privacy tabletop exercises.
  B. Involve the privacy office in an organizational review of the incident response plan.

  ---

  Explanation/Reference:

• Question 198:

  Which of the following MUST be available to facilitate a robust data breach management response?

  A. Lessons learned from prior data breach responses
  B. Best practices to obfuscate data for processing and storage
  C. An inventory of previously impacted individuals
  D. An inventory of affected individuals and systems
  A. Lessons learned from prior data breach responses

  ---

  Explanation/Reference:

  Reference: https://securityscorecard.com/blog/the-ultimate-data-breach-response-plan

• Question 199:

  Which of the following should be the FIRST consideration when selecting a data sanitization method?

  A. Risk tolerance
  B. Implementation cost
  C. Industry standards
  D. Storage type
  D. Storage type

  ---

  Explanation/Reference:

• Question 200:

  Which of the following is the BEST indication of a highly effective privacy training program?

  A. Members of the workforce understand their roles in protecting data privacy.
  B. HR has made privacy training an annual mandate for the organization.
  C. Recent audits have no findings or recommendations related to data privacy.
  D. No privacy incidents have been reported in the last year.
  B. HR has made privacy training an annual mandate for the organization.