Isaca CDPSE Online Practice Questions and Exam Preparation

Isaca CDPSE Online Questions & Answers

• Question 81:

  Which of the following protocols BEST protects end-to-end communication of personal data?

  A. Transmission Control Protocol (TCP)
  B. Transport Layer Security Protocol (TLS)
  C. Secure File Transfer Protocol (SFTP)
  D. Hypertext Transfer Protocol (HTTP)
  B. Transport Layer Security Protocol (TLS)

  ---

  Explanation/Reference:

  Reference: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/encryption/encryption-and-data-transfer/

• Question 82:

  Which of the following is the BEST way to explain the difference between data privacy and data security?

  A. Data privacy protects users from unauthorized disclosure, while data security prevents compromise.
  B. Data privacy protects the data subjects, while data security is about protecting critical assets.
  C. Data privacy is about data segmentation, while data security prevents unauthorized access.
  D. Data privacy stems from regulatory requirements, while data security focuses on consumer rights.
  B. Data privacy protects the data subjects, while data security is about protecting critical assets.

• Question 83:

  When using anonymization techniques to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

  A. The key must be kept separate and distinct from the data it protects.
  B. The data must be protected by multi-factor authentication.
  C. The key must be a combination of alpha and numeric characters.
  D. The data must be stored in locations protected by data loss prevention (DLP) technology.
  D. The data must be stored in locations protected by data loss prevention (DLP) technology.

  ---

  Explanation/Reference:

  Reference: https://www.isaca.org/resources/isaca-journal/issues/2018/volume-1/data-loss-preventionnext-steps

• Question 84:

  Which of the following is the GREATEST privacy concern for an organization implementing endpoint detection response (EDR) tools on employee laptops?

  A. Lack of an acknowledged user acceptance policy
  B. Unclear monitoring scope
  C. Poor controls on privileged access to EDR tools
  D. Lack of up-to-date EDR capability on employee laptops
  D. Lack of up-to-date EDR capability on employee laptops

• Question 85:

  Which of the following should trigger a review of an organization's privacy policy?

  A. Backup procedures for customer data are changed.
  B. Data loss prevention (DLP) incidents increase.
  C. An emerging technology will be implemented.
  D. The privacy steering committee adopts a new charter.
  D. The privacy steering committee adopts a new charter.

• Question 86:

  When configuring information systems for the communication and transport of personal data, an organization should:

  A. adopt the default vendor specifications.
  B. review configuration settings for compliance.
  C. implement the least restrictive mode.
  D. enable essential capabilities only.
  B. review configuration settings for compliance.

  ---

  Explanation/Reference:

  Reference: https://www.vonage.com/resources/articles/gdpr-means-customer-communications/

• Question 87:

  Which of the following is MOST important to ensure when reviewing processes associated with the destruction of data?

  A. The destruction of data is performed on site.
  B. The destruction of data is witnessed.
  C. The destruction is performed by a certified provider.
  D. The destruction method is approved by the data owner.
  D. The destruction method is approved by the data owner.

• Question 88:

  What is the BEST method to protect customers' personal data that is forwarded to a central system for analysis?

  A. Pseudonymization
  B. Deletion
  C. Encryption
  D. Anonymization
  C. Encryption

• Question 89:

  A material finding related to the integrity of personal data was discovered during a privacy audit. Which of the following should the IT privacy practitioner do FIRST?

  A. Discuss the matter with the board.
  B. Determine the impact to data subjects.
  C. Draft a corrective plan for management.
  D. Update the associated data privacy policy.
  A. Discuss the matter with the board.

• Question 90:

  Which of the following is the BEST way to protect the privacy of data stored on a laptop in case of loss or theft?

  A. Strong authentication controls
  B. Remote wipe
  C. Regular backups
  D. Endpoint encryption
  D. Endpoint encryption