Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 51:

  Which of the following should be established FIRST before authorizing remote access to a data store containing personal data?

  A. Privacy policy
  B. Network security standard
  C. Multi-factor authentication D. Virtual private network (VPN)
  D

• Question 52:

  Which of the following MOST effectively protects against the use of a network sniffer?

  A. Network segmentation
  B. Transport layer encryption
  C. An intrusion detection system (IDS)
  D. A honeypot environment
  A. Network segmentation

  ---

  Explanation/Reference:

  Reference: https://www.sciencedirect.com/topics/computer-science/network-sniffer

• Question 53:

  Which of the following is the MOST important consideration when choosing a method for data destruction?

  A. Granularity of data to be destroyed
  B. Time required for the chosen method of data destruction
  C. Validation and certification of data destruction
  D. Level and strength of current data encryption
  A. Granularity of data to be destroyed

• Question 54:

  Which of the following is the BEST method of data sanitization when there is a need to balance the destruction of data and the ability to recycle IT assets?

  A. Factory reset
  B. Degaussing
  C. Cryptographic erasure
  D. Data deletion
  B. Degaussing

  ---

  Explanation/Reference:

• Question 55:

  Which of the following is the MOST important key management practice when deploying cryptography for protecting personal data?

  A. Preventing users from using incorrect private keys
  B. Protecting the confidentiality and authenticity of private keys
  C. Preventing users from using incorrect public keys
  D. Protecting the confidentiality and authenticity of public keys
  B. Protecting the confidentiality and authenticity of private keys

• Question 56:

  Which of the following BEST ensures data confidentiality across databases?

  A. Logical data model
  B. Data normalization
  C. Data catalog vocabulary
  D. Data anonymization
  D. Data anonymization

• Question 57:

  Which of the following needs to be identified FIRST to define the privacy requirements to use when assessing the selection of IT systems?

  A. Type of data being processed
  B. Applicable control frameworks
  C. Applicable privacy legislation
  D. Available technology platforms
  A. Type of data being processed

• Question 58:

  Which of the following is the MOST important consideration when writing an organization's privacy policy?

  A. Using a standardized business taxonomy
  B. Aligning statements to organizational practices
  C. Ensuring acknowledgment by the organization's employees
  D. Including a development plan for personal data handling
  B. Aligning statements to organizational practices

• Question 59:

  An organization is designing a new human resources (HR) system. Which of the following should be implemented to BEST enable detection of unauthorized access to personal data?

  A. Data loss prevention (DLP) solution
  B. Security information and event management (SIEM) solution
  C. Vulnerability scanning and management software
  D. Web application firewall (WAF)
  A. Data loss prevention (DLP) solution

• Question 60:

  Which of the following should be done FIRST when developing an organization-wide strategy to address data privacy risk?

  A. Obtain executive support.
  B. Develop a data privacy policy.
  C. Gather privacy requirements from legal counsel.
  D. Create a comprehensive data inventory.
  A. Obtain executive support.