Question 171 · 229 in bank
Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?
Show answer
Answer: D
Certified Data Privacy Solutions Engineer229 questions across 23 pages are complete and free, with no account or card.
229 questions in this bank
Free access · progress saved on this device
Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?
Answer: D
Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?
Answer: C
What is the BEST way for an organization to maintain the effectiveness of its privacy breach incident response plan?
Answer: D
D. Conduct annual data privacy tabletop exercises. Conducting annual data privacy tabletop exercises is an effective way to maintain the readiness and effectiveness of an organization's privacy breach incident response plan.
Source: Adapted from community discussion — mmus
Which of the following is MOST important when developing an organizational data privacy program?
Answer: B
Correct answer is C - Following an established privacy framework Privacy frameworks assist enterprise in achieving their objectives for the governance and management of enterprise IT, and all other types of information processing.
Source: Adapted from community discussion — Ahbey_911
An organization is creating a personal data processing register to document actions taken with personal data. Which of the following categories should document controls relating to periods of retention for personal data?
Answer: A
Answer is A : Data archiving involves the process of moving data that is no longer actively used to a separate storage device for long-term retention. Data archives consist of older data that is still important and necessary for future reference, as well as data that must be retained for regulatory compliance. Therefore, controls relating to periods of retention for personal data would fall under this category. Data storage, acquisition, and input do not inherently involve the aspect of time or duration of retention
Source: Adapted from community discussion — Danford25
Which of the following should an IT privacy practitioner do FIRST following a decision to expand remote working capability to all employees due to a global pandemic?
Answer: A
When using anonymization techniques to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?
Answer: A
Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?
Answer: D
Which of the following BEST enables an IT privacy practitioner to ensure appropriate protection for personal data collected that is required to provide necessary services?
Answer: A
To ensure appropriate protection for personal data, it is critical for an IT privacy practitioner to have a thorough understanding of how data flows through the organization. This includes knowing where data is collected, how it is processed, where it is stored, who has access to it, and how it is shared internally and externally. Understanding these data flows helps identify potential vulnerabilities and risks to personal data at every stage, ensuring that appropriate protection measures (such as encryption, access controls, and anonymization) are applied in the right places.
Source: Adapted from community discussion — 4dfe785
Which of the following tracking technologies associated with unsolicited targeted advertisements presents the GREATEST privacy risk?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CDPSE practice, question 171. 229 questions available.
Version 1.0.0. How we source questions