CDPSE practice questions 221–229

1. Question 221 · 229 in bank

   Which of the following protocols BEST protects end-to-end communication of personal data?

   • ATransmission Control Protocol (TCP)
   • BTransport Layer Security Protocol (TLS)
   • CSecure File Transfer Protocol (SFTP)
   • DHypertext Transfer Protocol (HTTP)

   Show answer

   Answer: B

   Explanation

   SFTP is secure but limited to file transfers. On the other hand, TLS is a general-purpose protocol that provides security for a wide range of communication types. TLS can secure email, http, and more

   Source: Adapted from community discussion — 4dfe785

   Next question

2. Question 222 · 229 in bank

   An organization is planning a new implementation for tracking consumer web browser activity. Which of the following should be done FIRST?

   • ASeek approval from regulatory authorities.
   • BConduct a privacy impact assessment (PIA).
   • CObtain consent from the organization’s clients.
   • DReview and update the cookie policy.

   Show answer

   Answer: B

   Explanation

   Before obtaining consent, the organization must first fully understand the scope, purpose, and risks of tracking consumer web browser activity.

   Source: Adapted from community discussion — 4dfe785

   Next question

3. Question 223 · 229 in bank

   Which of the following is the BEST control to secure application programming interfaces (APIs) that may contain personal information?

   • AEncrypting APIs with the organization’s private key
   • BRequiring nondisclosure agreements (NDAs) when sharing APIs
   • CRestricting access to authorized users
   • DSharing only digitally signed APIs

   Show answer

   Answer: C

   Next question

4. Question 224 · 229 in bank

   Which of the following rights is an important consideration that allows data subjects to request the deletion of their data?

   • AThe right to object
   • BThe right to withdraw consent
   • CThe right to access
   • DThe right to be forgotten

   Show answer

   Answer: D

   Next question

5. Question 225 · 229 in bank

   A global organization is planning to implement a customer relationship management (CRM) system to be used in offices based in multiple countries. Which of the following is the MOST important data protection consideration for this project?

   • AIndustry best practice related to information security standards in each relevant jurisdiction
   • BIdentity and access management mechanisms to restrict access based on need to know
   • CEncryption algorithms for securing customer personal data at rest and in transit
   • DNational data privacy legislative and regulatory requirements in each relevant jurisdiction

   Show answer

   Answer: D

   Next question

6. Question 226 · 229 in bank

   Which of the following MOST effectively protects against the use of a network sniffer?

   • ANetwork segmentation
   • BTransport layer encryption
   • CAn intrusion detection system (IDS)
   • DA honeypot environment

   Show answer

   Answer: B

   Explanation

   It's a badly worded question since it's unclear whether the sniffer is inside (B - encryption) or outside the perimeter (C - IDS). Encryption would make the packets unreadable, but not stop the use of a sniffer. IDS would be more effective in detecting the use of a sniffer, which could then be blocked. Segmentation is a good practice, but does not stop a sniffer. If it asked about what protects against the successful exploitation of a sniffer, then you could answer.

   Source: Adapted from community discussion — johnH123

   Next question

7. Question 227 · 229 in bank

   Which of the following is the BEST way to hide sensitive personal data that is in use in a data lake?

   • AData masking
   • BData truncation
   • CData encryption
   • DData minimization

   Show answer

   Answer: A

   Next question

8. Question 228 · 229 in bank

   A global financial institution is implementing data masking technology to protect personal data used for testing purposes in non-production environments. Which of the following is the GREATEST challenge in this situation?

   • AAccess to personal data is not strictly controlled in development and testing environments.
   • BComplex relationships within and across systems must be retained for testing.
   • CPersonal data across the various interconnected systems cannot be easily identified.
   • DData masking tools are complex and difficult to implement.

   Show answer

   Answer: B

   Next question

9. Question 229 · 229 in bank

   Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

   • AWeb application firewall (WAF)
   • BWebsite URL blacklisting
   • CDomain name system (DNS) sinkhole
   • DDesktop antivirus software

   Show answer

   Answer: A

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 221. 229 questions available.