CDPSE practice questions 31–40

1. Question 31 · 229 in bank

   Which of the following should be the FIRST consideration when selecting a data sanitization method?

   • ARisk tolerance
   • BImplementation cost
   • CIndustry standards
   • DStorage type

   Show answer

   Answer: D

   Next question

2. Question 32 · 229 in bank

   Which of the following is the MOST critical action for an organization prior to tracking user activity in its applications?

   • AProviding notification to users of the organization’s privacy policies
   • BEstablishing a data classification scheme
   • CIdentifying and validating users’ countries of residence
   • DRequesting users to read and accept the organization's privacy notice

   Show answer

   Answer: D

   Next question

3. Question 33 · 229 in bank

   Which of the following is the MOST important privacy consideration for video surveillance in high security areas?

   • AVideo surveillance recordings may only be viewed by the organization.
   • BThere is no limitation for retention of this data.
   • CVideo surveillance data must be stored in encrypted format.
   • DThose affected must be informed of the video surveillance.

   Show answer

   Answer: D

   Explanation

   C is wrong. Those affected must be informed of the video surveillance. Informed consent. There is no requirement for encryption.

   Source: Adapted from community discussion — johnH123

   Next question

4. Question 34 · 229 in bank

   What should a sender do to send a recipient a file of personal data using asymmetric encryption?

   • ARecipient's private key is used to encrypt; recipient's public key is used to decrypt.
   • BSender’s public key is used to encrypt; recipient's public key is used to decrypt.
   • CRecipient's public key is used to encrypt; recipient's private key is used to decrypt.
   • DRecipient's private key is used to encrypt; sender’s public key is used to decrypt.

   Show answer

   Answer: C

   Next question

5. Question 35 · 229 in bank

   Which of the following MUST be included in a contract with a vendor that will be processing personal data?

   • AA clause to hash all data that is processed or stored by the vendor
   • BA clause to prohibit the vendor from sending data to third parties
   • CA clause to report breaches in a timely manner to the organization
   • DA clause to require the vendor to comply with industry best practices

   Show answer

   Answer: C

   Next question

6. Question 36 · 229 in bank

   The identification of all data recipients in a privacy notice to website visitors reflects which privacy principle?

   • AAccuracy
   • BConsent
   • CIntegrity
   • DTransparency

   Show answer

   Answer: D

   Next question

7. Question 37 · 229 in bank

   Which of the following system architectures BEST supports anonymity for data transmission?

   • AClient-server
   • BPlug-in-based
   • CFront-end
   • DPeer-to-peer

   Show answer

   Answer: D

   Explanation

   In a peer-to-peer network, data is transmitted directly between users (peers) without relying on a central server. This architecture supports anonymity by distributing data and communication across multiple nodes, making it more difficult to trace the origin or destination of the data. Each node can act as both a client and a server, which helps to obscure the identities of the participants in the network.

   Source: Adapted from community discussion — 4dfe785

   Next question

8. Question 38 · 229 in bank

   Which of the following provides the BEST assurance that a potential vendor is able to comply with privacy regulations and the organization's data privacy policy?

   • AIncluding mandatory compliance language in the request for proposal (RFP)
   • BConducting a risk assessment of all candidate vendors
   • CRequiring candidate vendors to provide documentation of privacy processes
   • DObtaining self-attestations from all candidate vendors

   Show answer

   Answer: C

   Next question

9. Question 39 · 229 in bank

   An organization decides to outsource its customer personal data analytics to a third party to understand spending habits. Which of the following is the MOST important contractual consideration?

   • APlatform architecture used to process the data
   • BTerms for continuous monitoring of the vendor
   • CClearly defined data responsibilities of all parties
   • DThe vendor's vulnerability management program

   Show answer

   Answer: C

   Explanation

   The mention of "contractual consideration" indicates an administrative control, which would be clearly defined data responsibilities. "Continuous monitoring" is a technical control.

   Source: Adapted from community discussion — johnH123

   Next question

10. Question 40 · 229 in bank

    Which of the following is the BEST way to address threats to mobile device privacy when using beacons as a tracking technology?

    • ADisable location services.
    • BEnable Trojan scanners.
    • CEnable antivirus for mobile devices.
    • DDisable Bluetooth services.

    Show answer

    Answer: D

    Explanation

    D. Disable Bluetooth services. Explanation: Beacons, especially in the context of tracking technology, primarily use Bluetooth Low Energy (BLE) to communicate and interact with mobile devices. Disabling Bluetooth services would prevent the beacons from being able to detect and communicate with the mobile device, thus addressing the privacy threats associated with this tracking technology.

    Source: Adapted from community discussion — Ahbey_911

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 31. 229 questions available.