Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 41:

  Using hash values with stored personal data BEST enables an organization to:

  A. protect against unauthorized access.
  B. tag the data with classification information.
  C. ensure data indexing performance.
  D. detect changes to the data.
  D. detect changes to the data.

• Question 42:

  An organization must de-identify its data before it is transferred to a third party. Which of the following should be done FIRST?

  A. Determine the categories of personal data collected.
  B. Remove the identifiers during the data transfer.
  C. Encrypt the data at rest and in motion.
  D. Ensure logging is turned on for the database.
  A. Determine the categories of personal data collected.

  ---

  Explanation/Reference:

• Question 43:

  Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?

  A. User acceptance testing (UAT)
  B. Data classification
  C. Privacy impact assessment (PIA)
  D. Automatic dynamic code scan
  C. Privacy impact assessment (PIA)

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/news-and-trends/industry-news/2020/three-ways-your-approach-to-privacy-is-at-risk

• Question 44:

  Which of the following BEST facilitates a privacy impact assessment (PIA)?

  A. Creating an information flow and repository to identify personal data being collected
  B. Providing privacy and awareness training for project managers and system owners
  C. Comparing current privacy policies and procedures to industry benchmarks
  D. Identifying key systems used for processing and storing personal data
  C. Comparing current privacy policies and procedures to industry benchmarks

• Question 45:

  In which of the following should the data record retention period be defined and established?

  A. Data record model
  B. Data recovery procedures
  C. Data quality standard
  D. Data management plan
  D. Data management plan

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/isaca-journal/past-issues/2010/an-introduction-to-digital-records-management

• Question 46:

  Which of the following is the PRIMARY reason to complete a privacy impact assessment (PIA)?

  A. To comply with consumer regulatory requirements
  B. To establish privacy breach response procedures
  C. To classify personal data
  D. To understand privacy risks
  A. To comply with consumer regulatory requirements

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/news-and-trends/industry-news/2020/three-ways-your-approach-to-privacy-is-at-risk

• Question 47:

  What type of personal information can be collected by a mobile application without consent?

  A. Full name
  B. Geolocation
  C. Phone number
  D. Accelerometer data
  A. Full name

• Question 48:

  Which of the following is the PRIMARY privacy concern with the use of a data lake containing transaction data, including personal data?

  A. The data lake retains all the organization's data.
  B. The data lake supports all operational users.
  C. The data lake receives data from all data sources.
  D. The data lake supports all types of data structures.
  B. The data lake supports all operational users.

• Question 49:

  During which stage of the software development life cycle (SDLC) is it MOST critical to conduct a privacy impact assessment (PIA)?

  A. Development
  B. Implementation
  C. Testing
  D. Planning
  A. Development

• Question 50:

  Which of the following is the BEST way for an organization to gain visibility into its exposure to privacy-related vulnerabilities?

  A. Review historical privacy incidents in the organization.
  B. Monitor inbound and outbound communications.
  C. Perform an analysis of known threats.
  D. Implement a data loss prevention (DLP) solution.
  C. Perform an analysis of known threats.