Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 71:

  Which of the following is MOST important to establish within a data storage policy to protect data privacy?

  A. Data redaction
  B. Data quality assurance (QA)
  C. Irreversible disposal
  D. Collection limitation
  D. Collection limitation

• Question 72:

  Which of the following features should be incorporated into an organization's technology stack to meet privacy requirements related to the rights of data subjects to control their personal data?

  A. Providing system engineers the ability to search and retrieve data
  B. Allowing individuals to have direct access to their data
  C. Allowing system administrators to manage data access
  D. Establishing a data privacy customer service bot for individuals
  B. Allowing individuals to have direct access to their data

  ---

  Explanation/Reference:

  Any organization collecting information about EU residents is required to operate with transparency in collecting and using their personal information. Chapter III of the GDPR defines eight data subject rights that have become foundational for

  other privacy regulations around the world:

  Right to access personal data. Data subjects can access the data collected on them.

• Question 73:

  To ensure effective management of an organization's data privacy policy, senior leadership MUST define:

  A. training and testing requirements for employees handling personal data.
  B. roles and responsibilities of the person with oversight.
  C. metrics and outcomes recommended by external agencies.
  D. the scope and responsibilities of the data owner.
  B. roles and responsibilities of the person with oversight.

• Question 74:

  Which of the following is the PRIMARY reason for an organization to use hash functions when hardening application systems involved in biometric data processing?

  A. To ensure technical security measures are effective
  B. To prevent possible identity theft
  C. To meet the organization's security baseline
  D. To reduce the risk of sensitive data breaches
  D. To reduce the risk of sensitive data breaches

• Question 75:

  Which of the following is the BEST control to secure application programming interfaces (APIs) that may contain personal information?

  A. Encrypting APIs with the organization's private key
  B. Requiring nondisclosure agreements (NDAs) when sharing APIs
  C. Restricting access to authorized users
  D. Sharing only digitally signed APIs
  C. Restricting access to authorized users

• Question 76:

  Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

  A. Web application firewall (WAF)
  B. Website URL blacklisting
  C. Domain name system (DNS) sinkhole
  D. Desktop antivirus software
  A. Web application firewall (WAF)

• Question 77:

  When using a digital signature, which of the following keys will the recipient need to verify the authenticity of the sender's message?

  A. The recipient's public key
  B. The sender's private key
  C. The sender's public key
  D. The recipient's private key
  C. The sender's public key

• Question 78:

  In a contract for cloud services, whom should a cloud provider agree to notify in the event of a personal data breach?

  A. Its client's end users
  B. Its client's insurance carrier
  C. Its client's regulatory authority
  D. Its client
  A. Its client's end users

• Question 79:

  An organization is creating a personal data processing register to document actions taken with personal data. Which of the following categories should document controls relating to periods of retention for personal data?

  A. Data archiving
  B. Data storage
  C. Data acquisition
  D. Data input
  A. Data archiving

  ---

  Explanation/Reference:

  However, the risks associated with long-term retention have compelled organizations to consider alternatives; one is data archival, the process of preparing data for long-term storage. When organizations are bound by specific laws to retain data for many years, archival provides a viable opportunity to remove data from online transaction systems to other systems or media.

• Question 80:

  Which of the following system architectures BEST supports anonymity for data transmission?

  A. Client-server
  B. Plug-in-based
  C. Front-end
  D. Peer-to-peer
  B. Plug-in-based