Certified Data Privacy Solutions Engineer229 questions across 23 pages are complete and free, with no account or card.
229 questions in this bank
Free access · progress saved on this device
An employee accidentally sends an email with personal data to the wrong person. Which of the following should the employee do FIRST upon becoming aware of the issue?
Answer: D
Report the situation to the data privacy officer as it could be a privacy breach. The individual should not make the judgment call here.
Source: Adapted from community discussion — johnH123
Which of the following is MOST useful for understanding an organization’s approach towards privacy compliance?
Answer: B
A project manager for a new data collection system had a privacy impact assessment (PIA) completed before the solution was designed. Once the system was released into production, an audit revealed personal data was being collected that was not part of the PIA. What is the BEST way to avoid this situation in the future?
Answer: C
Which of the following is the PRIMARY reason to allow data transfer between regions?
Answer: B
Best Answer is B. Allowing data transfer between regions often hinges on the presence of a legal basis, and the public interest is a strong justification recognized under many data protection regulations (such as GDPR). This basis allows organizations to transfer data when it serves a broader public interest, such as in matters of health, safety, or humanitarian reasons.
Source: Adapted from community discussion — 821bbab
Which of the following should an IT privacy practitioner review FIRST to understand where personal data is coming from and how it is used within the organization?
Answer: A
Data process flow diagrams makes more sense, since the question is specifically asking "where personal data is coming from" and not about collection standards.
Source: Adapted from community discussion — johnH123
Which of the following is the BEST course of action to manage privacy risk when a significant vulnerability is identified in the operating system (OS) that supports an organization’s customer relationship management (CRM) system?
Answer: D
It's definitely not B. Initially, I wanted to say A - apply the patching, but D - Perform a vulnerability assessment to determine the impact makes the most sense since it will most likely result in an emergency change ticket to apply the OS patch, based on the severity.
Source: Adapted from community discussion — johnH123
In a contract for cloud services, whom should a cloud provider agree to notify in the event of a personal data breach?
Answer: D
Which of the following BEST prevents users from sending out customers’ personal data without encryption?
Answer: A
Which of the following would BEST enable an organization to account for unstructured data?
Answer: C
To increase productivity, an organization is planning to implement movement tracking devices in the vehicles of field employees. Which of the following MUST be in place before installing the devices?
Answer: D
BYOD (user owned devices) has nothing to do with movement tracking devices in the vehicles. End user agreements seems to make more sense, since the driver's privacy might be impacted if not informed of the device and its purpose.
Source: Adapted from community discussion — johnH123
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CDPSE practice, question 91. 229 questions available.
Version 1.0.0. How we source questions