Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 61:

  An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is the BEST choice to mitigate this risk?

  A. Email filtering system
  B. Intrusion monitoring
  C. Mobile device management (MDM)
  D. User behavior analytics
  D. User behavior analytics

• Question 62:

  Which of the following is the BEST way to address privacy concerns when an organization captures personal data from a third party through an open application programming interface (API)?

  A. Implement encryption for the data transmission.
  B. Develop a service level agreement (SLA) with the third party.
  C. Review the specification document of the open API.
  D. Obtain consent from the data subjects.
  D. Obtain consent from the data subjects.

• Question 63:

  An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

  A. Data integrity and confidentiality
  B. System use requirements
  C. Data use limitation
  D. Lawfulness and fairness
  A. Data integrity and confidentiality

  ---

  Explanation/Reference:

  Reference: https://help.turnitin.com/Privacy_and_Security/Privacy_and_Security.htm

• Question 64:

  Which of the following should an IT privacy practitioner do FIRST when assessing the potential impact of new privacy legislation on the organization?

  A. Identify systems and processes that contain privacy components.
  B. Research and identify privacy legislation in other countries that may contain similar requirements.
  C. Share operational plans for achieving compliance with regulatory entities.
  D. Restrict the collection of personal information until there is assurance the organization is compliant.
  A. Identify systems and processes that contain privacy components.

• Question 65:

  What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

  A. Distributing a privacy rights policy
  B. Mailing rights documentation to customers
  C. Publishing a privacy notice
  D. Gaining consent when information is collected
  C. Publishing a privacy notice

• Question 66:

  Which of the following should be done FIRST to establish privacy by design when developing a contact-tracing application?

  A. Conduct a privacy impact assessment (PIA).
  B. Conduct a development environment review.
  C. Identify privacy controls for the application.
  D. Identify differential privacy techniques.
  D. Identify differential privacy techniques.

• Question 67:

  Which of the following zones within a data lake requires sensitive data to be encrypted or tokenized?

  A. Trusted zone
  B. Clean zone
  C. Raw zone
  D. Temporal zone
  D. Temporal zone

  ---

  Explanation/Reference:

• Question 68:

  Which of the following is the BEST way to validate that privacy practices align to the published enterprise privacy management program?

  A. Conduct an audit.
  B. Report performance metrics.
  C. Perform a control self-assessment (CSA).
  D. Conduct a benchmarking analysis.
  D. Conduct a benchmarking analysis.

• Question 69:

  Which of the following helps to ensure the identities of individuals in two-way communication are verified?

  A. Virtual private network (VPN)
  B. Transport Layer Security (TLS)
  C. Mutual certificate authentication
  D. Secure Shell (SSH)
  C. Mutual certificate authentication

  ---

  Explanation/Reference:

  Reference: https://www.cloudflare.com/ru-ru/learning/access-management/what-is-mutual-authentication/

• Question 70:

  Which of the following vulnerabilities would have the GREATEST impact on the privacy of information?

  A. Private key exposure
  B. Poor patch management
  C. Lack of password complexity
  D. Out-of-date antivirus signatures
  A. Private key exposure