CDPSE practice questions 101–110

1. Question 101 · 229 in bank

   Which of the following is the MOST effective way to prevent employees from inappropriately accessing customer information?

   • AEnforce an acceptable use policy.
   • BRequire organization-wide data privacy training.
   • CImplement role-based user provisioning.
   • DEngage in employee monitoring.

   Show answer

   Answer: C

   Next question

2. Question 102 · 229 in bank

   A data processor that handles personal data for multiple customers has decided to migrate its data warehouse to a third-party provider. What is the processor obligated to do prior to implementation?

   • ASeek approval from all in-scope data controllers.
   • BEnsure data retention periods are documented.
   • CObtain assurance that data subject requests will continue to be handled appropriately.
   • DImplement comparable industry-standard data encryption in the new data warehouse.

   Show answer

   Answer: A

   Next question

3. Question 103 · 229 in bank

   Which of the following is the BEST way to prevent dangerous SQL write statements from being executed on data?

   • ARestrict access to row-specific data.
   • BCreate encrypted versions of the data.
   • CExclude access to specific tables or columns of data.
   • DCreate a read-only data warehouse.

   Show answer

   Answer: D

   Next question

4. Question 104 · 229 in bank

   Which of the following should be done FIRST before an organization migrates data from an on-premise solution to a cloud-hosted solution that spans more than one jurisdiction?

   • AConduct a penetration test of the hosted solution.
   • BEnsure data loss prevention (DLP) alerts are turned on.
   • CEncrypt the data while it is being migrated.
   • DAssess the organization’s exposure related to the migration.

   Show answer

   Answer: D

   Next question

5. Question 105 · 229 in bank

   Of the following, who is the BEST resource for determining which privacy laws must be followed for data that crosses international borders?

   • AThe legal counsel for the organization that plans to collect the data
   • BThe government in the country where the data is initially collected
   • CThe chief information security officer (CISO) in the country that processes the data
   • DThe chief risk officer (CRO) for the organization that plans to collect the data

   Show answer

   Answer: A

   Next question

6. Question 106 · 229 in bank

   Which of the following scenarios should trigger the completion of a privacy impact assessment (PIA)?

   • ANew data retention and backup policies
   • BUpdates to the enterprise data policy
   • CNew inter-organizational data flows
   • DUpdates to data quality standards

   Show answer

   Answer: C

   Next question

7. Question 107 · 229 in bank

   Which of the following is MOST important when creating a data retention policy?

   • ARequesting and obtaining board approval
   • BIdentifying and classifying information assets
   • CReviewing and updating current procedures
   • DIdentifying and scoping regulatory requirements

   Show answer

   Answer: D

   Next question

8. Question 108 · 229 in bank

   An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

   • AData integrity and confidentiality
   • BSystem use requirements
   • CData use limitation
   • DLawfulness and fairness

   Show answer

   Answer: C

   Next question

9. Question 109 · 229 in bank

   Which of the following documents should be communicated to customers to establish accountability for the use and protection of personal information?

   • APrivacy standards
   • BPrivacy consent form
   • CPrivacy notice
   • DPrivacy procedures

   Show answer

   Answer: C

   Next question

10. Question 110 · 229 in bank

    Which of the following is the PRIMARY outcome of a privacy risk assessment?

    • AComprehensive privacy risk register
    • BDefined risk mitigation strategy and plans
    • CIdentified risk associated with data processing
    • DApproved organizational risk appetite

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 101. 229 questions available.