CDPSE practice questions 21–30

1. Question 21 · 229 in bank

   Which of the following is the PRIMARY objective of privacy incident response?

   • ATo ensure data subjects impacted by privacy incidents are notified.
   • BTo reduce privacy risk to the lowest possible level
   • CTo mitigate the impact of privacy incidents
   • DTo optimize the costs associated with privacy incidents

   Show answer

   Answer: C

   Next question

2. Question 22 · 229 in bank

   An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

   • ADetecting malicious access through endpoints
   • BImplementing network traffic filtering on endpoint devices
   • CManaging remote access and control
   • DHardening the operating systems of endpoint devices

   Show answer

   Answer: D

   Next question

3. Question 23 · 229 in bank

   When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?

   • AData classification labeling
   • BData residing in another country
   • CVolume of data stored
   • DPrivacy training for backup users

   Show answer

   Answer: B

   Explanation

   B. Data residing in another country: This is a critical factor from a privacy regulation standpoint. When data is stored in another country, it may be subject to different laws and regulations. Organizations must ensure compliance with privacy requirements across borders.

   Source: Adapted from community discussion — kingsleyaws

   Next question

4. Question 24 · 229 in bank

   An organization has a policy requiring the encryption of personal data if transmitted through email. Which of the following is the BEST control to ensure the effectiveness of this policy?

   • AProvide periodic user awareness training on data encryption.
   • BImplement a data loss prevention (DLP) tool.
   • CConduct regular control self-assessments (CSAs).
   • DEnforce annual attestation to policy compliance.

   Show answer

   Answer: B

   Next question

5. Question 25 · 229 in bank

   Which of the following is MOST important to include when defining an organization’s privacy requirements as part of a privacy program plan?

   • AData classification process
   • BPrivacy management governance
   • CPrivacy protection infrastructure
   • DLessons learned documentation

   Show answer

   Answer: B

   Next question

6. Question 26 · 229 in bank

   Which of the following is the BEST way to explain the difference between data privacy and data security?

   • AData privacy protects users from unauthorized disclosure, while data security prevents compromise.
   • BData privacy protects the data subjects, while data security is about protecting critical assets.
   • CData privacy is about data segmentation, while data security prevents unauthorized access.
   • DData privacy stems from regulatory requirements, while data security focuses on consumer rights.

   Show answer

   Answer: B

   Next question

7. Question 27 · 229 in bank

   Which of the following should trigger a review of an organization's privacy policy?

   • ABackup procedures for customer data are changed.
   • BData loss prevention (DLP) incidents increase.
   • CAn emerging technology will be implemented.
   • DThe privacy steering committee adopts a new charter.

   Show answer

   Answer: D

   Next question

8. Question 28 · 229 in bank

   Which of the following BEST ensures an organization’s data retention requirements will be met in the public cloud environment?

   • AService level agreements (SLAs)
   • BCloud vendor agreements
   • CData classification schemes
   • DAutomated data deletion schedules

   Show answer

   Answer: D

   Next question

9. Question 29 · 229 in bank

   A web-based payment service is adding a requirement for biometric authentication. Which risk factor is BEST mitigated by this practice?

   • AUser validation failures when reconnecting after lost sessions
   • BZero-day attacks and exploits
   • CIdentity spoofing by unauthorized users
   • DLegal liability from the misuse of accounts

   Show answer

   Answer: C

   Next question

10. Question 30 · 229 in bank

    Which of the following is MOST important to review before using an application programming interface (API) to help mitigate related privacy risk?

    • AData taxonomy
    • BData classification
    • CData flows
    • DData collection

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 21. 229 questions available.