CDPSE practice questions 151–160

1. Question 151 · 229 in bank

   Which of the following is the BEST way to mitigate privacy risk associated with application programming interfaces (APIs)?

   • AActive monitoring of API schema changes
   • BUse only APIs that are developed internally by the organization
   • CDocument dependency usage of all APIs.
   • DEnsure APIs are included in the scope of the vulnerability management program

   Show answer

   Answer: D

   Next question

2. Question 152 · 229 in bank

   An audit of an organization’s customer relationship management (CRM) system revealed duplicate user accounts for many customers. Which of the following should be the IT privacy practitioner's GREATEST concern?

   • ADuplicates may lead to increased customer inquiries and communication costs.
   • BLack of data quality violates database integrity rules.
   • CLack of data quality may result in increased audit findings.
   • DCritical communications may not reach the correct customer contacts.

   Show answer

   Answer: D

   Next question

3. Question 153 · 229 in bank

   Which of the following is the GREATEST privacy risk factor for data stored on disk?

   • ALack of encryption at rest
   • BUsers storing data locally
   • CHardware degradation
   • DLack of periodic backups

   Show answer

   Answer: A

   Next question

4. Question 154 · 229 in bank

   A bug has been identified in a third-party video library that could expose sensitive user data. Which of the following is the BEST recommendation to address this issue?

   • APerform a full antivirus scan before using the library.
   • BSanitize any sensitive data in the library.
   • CPatch the vulnerability before using the library.
   • DRequire authentication to access the library.

   Show answer

   Answer: C

   Next question

5. Question 155 · 229 in bank

   Which of the following is the PRIMARY reason that regulatory authorities would require permission for corporate use of drones with mounted video cameras for visual surveillance?

   • ATo prevent compromise of network security
   • BTo minimize disruption in wireless networks
   • CTo facilitate investigation of privacy incidents
   • DTo provide sufficient notice to the public

   Show answer

   Answer: D

   Next question

6. Question 156 · 229 in bank

   Which of the following should be an information security manager's PRIMARY focus when migrating data between two dissimilar systems?

   • ADeveloping automation to facilitate the migration
   • BEnsuring the integrity of system backups
   • CEnsuring data controls are maintained
   • DDetermining the amount of effort required

   Show answer

   Answer: C

   Next question

7. Question 157 · 229 in bank

   Which of the following is the BEST way to protect the confidentiality of the information returned by a new application programming interface (API) integration?

   • ARequire all API requests to be monitored.
   • BUpdate the privacy policy to include use of the API.
   • CEnsure all API traffic is encrypted in transit.
   • DUse only APIs with de-identified data.

   Show answer

   Answer: C

   Next question

8. Question 158 · 229 in bank

   Which of the following is MOST likely to be considered confidential data as opposed to personal information'?

   • AGovernment identification number
   • BDriver's license number
   • CInternet Protocol (IP) address
   • DCustomer income level

   Show answer

   Answer: D

   Explanation

   This seems to be tricky question. Answer is C. Here's why: Confidential Data vs. Personal Information: Confidential data often refers to sensitive information that must be protected from unauthorized access, which can include proprietary business information, trade secrets, and certain technical information. Personal information, on the other hand, typically relates to identifiable information about an individual, such as their name, identification numbers, or demographic details. Other options are all considered personal information.

   Source: Adapted from community discussion — 821bbab

   Next question

9. Question 159 · 229 in bank

   Which of the following zones within a data lake requires sensitive data to be encrypted or tokenized?

   • ATrusted zone
   • BClean zone
   • CRaw zone
   • DTemporal zone

   Show answer

   Answer: C

   Explanation

   Sensitive data should be encrypted or tokenized in the Trusted zone of a data lake. The Trusted zone is the area where trusted data is stored, and access controls are tightly managed. It is typically used for highly sensitive or regulated data, such as personally identifiable information (PII), financial data, and health records. The other zones within a data lake, such as the Clean zone, Raw zone, and Temporal zone, may also contain sensitive data, but they are typically less secure and do not require the same level of encryption or tokenization as the Trusted zone.

   Source: Adapted from community discussion — datapro

   Next question

10. Question 160 · 229 in bank

    Rounding and nulling are examples of which type of data de-identification function?

    • AHashing
    • BTokenization
    • CMasking
    • DSalting

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 151. 229 questions available.