CDPSE practice questions 131–140

1. Question 131 · 229 in bank

   Which of the following BEST mitigates the privacy risk associated with setting cookies on a website?

   • AObtaining user consent
   • BApplying data masking
   • CImplementing impersonation
   • DEnsuring nonrepudiation

   Show answer

   Answer: A

   Next question

2. Question 132 · 229 in bank

   Which of the following is MOST important to include in a data use policy?

   • AThe length of time personal data will be retained
   • BThe method used to delete or destroy personal data
   • CThe reason for collecting and using personal data
   • DThe requirements for collecting and using personal data

   Show answer

   Answer: D

   Next question

3. Question 133 · 229 in bank

   Which of the following is the GREATEST privacy threat when an organization wants to leverage artificial intelligence (AI) for marketing purposes?

   • AUnencrypted data transfer
   • BLow data accuracy
   • CHallucinations
   • DData exploitation

   Show answer

   Answer: D

   Next question

4. Question 134 · 229 in bank

   An enterprise is planning to introduce a new product that involves geolocation tracking of customers. Which of the following is the BEST way to determine the associated risk?

   • AEnforce multi-factor authentication (MFA) for the analysts working on the fraud alerts.
   • BEncrypt the customer data and decrypt only in cases of reasonable suspicion.
   • CKeep the customer data in clear text to allow for real-time response.
   • DRun a reversible hash on the customer data to allow for quick identification.

   Show answer

   Answer: B

   Next question

5. Question 135 · 229 in bank

   Which type of flaw in an application programming interface (API) allows an attacker to manipulate legitimate standard functionality?

   • ABusiness logic misconfiguration
   • BExcessive data exposure
   • CLack of resources and rate limiting
   • DBroken object level authorization

   Show answer

   Answer: A

   Next question

6. Question 136 · 229 in bank

   Which of the following should an organization do FIRST to ensure it can respond to all data subject access requests in a timely manner?

   • AUnderstand the data in its possession.
   • BInvest in a platform to automate data review.
   • CConfirm what is required for disclosure.
   • DCreate a policy for handling access requests.

   Show answer

   Answer: A

   Next question

7. Question 137 · 229 in bank

   Which of the following BEST mitigates the risk of users not understanding the purpose of their data being collected?

   • AEncryption
   • BTransparency
   • CIntervenability
   • DUnlinkability

   Show answer

   Answer: B

   Next question

8. Question 138 · 229 in bank

   Which of the following BEST protects against unauthorized access to stored personal data?

   • AAdvanced Encryption Standard (AES)
   • BTransport Layer Security (TLS)
   • CIntrusion detection system (IDS)
   • DData loss prevention (DLP)

   Show answer

   Answer: A

   Next question

9. Question 139 · 229 in bank

   Which of the following should be done FIRST when responding to a mandate to protect a critical application that was developed in-house?

   • AApply dynamic application security testing (DAST).
   • BImplement the maximum level of protection.
   • CDevelop a proprietary encryption scheme.
   • DPerform a threat assessment.

   Show answer

   Answer: D

   Next question

10. Question 140 · 229 in bank

    A new marketing application needs to use data from the organization’s customer database. Prior to the application using the data, which of the following should be done FIRST?

    • AEnsure the data loss prevention (DLP) tool is logging activity.
    • BDe-identify all personal data in the database.
    • CDetermine what data is required by the application.
    • DRenew the encryption key to include the application.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 131. 229 questions available.