Certified Data Privacy Solutions Engineer229 questions across 23 pages are complete and free, with no account or card.
229 questions in this bank
Free access · progress saved on this device
An organization’s data destruction guidelines should require hard drives containing personal data to go through which of the following processes prior to being crushed?
Answer: C
CDPSE Review Manual, p. 171, Section 3.11.4 Degaussing "Degaussing is a preferred method for the destruction of data, because destroying the drive alone can leave fragments of media that contain readable data."
Source: Adapted from community discussion — ME79
Which of the following processes BEST enables an organization to maintain the quality of personal data?
Answer: A
Updating the data quality standard through periodic review is a policy, but it doesn't directly do anything to maintain the quality of personal data. Routine validation makes the most sense (USPS API for address validation, user attestation of collected data, etc.)
Source: Adapted from community discussion — johnH123
Which of the following is the MOST important consideration when determining retention periods for personal data?
Answer: B
When determining retention periods for personal data, the MOST important consideration is: B. Notice provided to customers during data collection. The notice given to customers (or data subjects) during the data collection phase is crucial because it typically includes information on how long their data will be kept.
Source: Adapted from community discussion — mmus
What is the BEST method to protect customers’ personal data that is forwarded to a central system for analysis?
Answer: A
It's NOT C. You can't do analysis on encrypted data. So, A it is. Pseudonymization allows for meaningful analysis of the data while still protecting individual identities.
Source: Adapted from community discussion — 4dfe785
Which of the following should be done FIRST to address privacy risk when migrating customer relationship management (CRM) data to a new system?
Answer: C
Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?
Answer: D
An organization is developing a wellness smartwatch application and is considering what information should be collected from the application users. Which of the following is the MOST legitimate information to collect for business reasons in this situation?
Answer: A
Height, weight, and activities are directly relevant to the core function of a wellness application. These data points are essential for tracking fitness and overall health.
Source: Adapted from community discussion — 4dfe785
Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?
Answer: B
It is MOST important to consider privacy by design principles during which phase of the software development life cycle (SDLC)?
Answer: B
B is the correct answer. PbD provides a framework for embedding privacy controls into the design of technology from the beginning of the project, so the requirement phase is correct.
Source: Adapted from community discussion — Ahbey_911
Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CDPSE practice, question 211. 229 questions available.
Version 1.0.0. How we source questions