Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 211:

  Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

  A. The organization's potential legal liabilities related to the data
  B. The data recovery capabilities of the storage provider
  C. The data security policies and practices of the storage provider
  D. Any vulnerabilities identified in the cloud system
  C. The data security policies and practices of the storage provider

• Question 212:

  An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

  A. Detecting malicious access through endpoints
  B. Implementing network traffic filtering on endpoint devices
  C. Managing remote access and control
  D. Hardening the operating systems of endpoint devices
  B. Implementing network traffic filtering on endpoint devices

  ---

  Explanation/Reference:

• Question 213:

  Which of the following is MOST important to address in a privacy policy with respect to big data repositories of sales information?

  A. Overall data management strategy
  B. Encryption of data at rest
  C. Transparency with customers
  D. Retention of archived information
  A. Overall data management strategy

• Question 214:

  Which of the following is the BEST method to ensure the security of encryption keys when transferring data containing personal information between cloud applications?

  A. Whole disk encryption
  B. Asymmetric encryption
  C. Digital signature
  D. Symmetric encryption
  B. Asymmetric encryption

  ---

  Explanation/Reference:

  Reference: https://www.keyfactor.com/blog/symmetric-vs-asymmetric-encryption/

• Question 215:

  What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?

  A. Cross-border data transfer
  B. Support staff availability and skill set
  C. User notification
  D. Global public interest
  B. Support staff availability and skill set

• Question 216:

  Which of the following would MOST effectively reduce the impact of a successful breach through a remote access solution?

  A. Compartmentalizing resource access
  B. Regular testing of system backups
  C. Monitoring and reviewing remote access logs
  D. Regular physical and remote testing of the incident response plan
  D. Regular physical and remote testing of the incident response plan

• Question 217:

  From a privacy perspective, it is MOST important to ensure data backups are:

  A. encrypted.
  B. differential.
  C. incremental.
  D. pseudonymized.
  A. encrypted.

• Question 218:

  Which of the following provides the BEST assurance that a potential vendor is able to comply with privacy regulations and the organization's data privacy policy?

  A. Including mandatory compliance language in the request for proposal (RFP)
  B. Conducting a risk assessment of all candidate vendors
  C. Requiring candidate vendors to provide documentation of privacy processes
  D. Obtaining self-attestations from all candidate vendors
  B. Conducting a risk assessment of all candidate vendors

• Question 219:

  Which of the following BEST enables an organization to comply with data privacy laws?

  A. Mandating frequent organization-wide privacy training
  B. Creating a matrix of data privacy regulations
  C. Limiting the data that the organization maintains
  D. Implementing strong identity and access controls
  C. Limiting the data that the organization maintains

  ---

  Explanation/Reference:

• Question 220:

  An organization is developing a wellness smartwatch application and is considering what information should be collected from the application users. Which of the following is the MOST legitimate information to collect for business reasons in this situation?

  A. Height, weight, and activities
  B. Sleep schedule and calorie intake
  C. Education and profession
  D. Race, age, and gender
  B. Sleep schedule and calorie intake