CDPSE practice questions 51–60

1. Question 51 · 229 in bank

   Which of the following is the BEST method of data sanitization when there is a need to balance the destruction of data and the ability to recycle IT assets?

   • AFactory reset
   • BDegaussing
   • CCryptographic erasure
   • DData deletion

   Show answer

   Answer: C

   Explanation

   C: Cryptographic Erasure Cryptographic erasure involves encrypting data and then securely deleting the encryption key, rendering the data inaccessible and effectively unreadable. This method allows IT assets, such as hard drives or storage devices, to be reused or recycled since the physical medium is not destroyed. It's a balance between ensuring the data cannot be recovered and maintaining the integrity of the IT asset for potential reuse. Other methods like degaussing or factory reset might not ensure complete data sanitization, and simple data deletion does not prevent data from being recovered with specialized tools.

   Source: Adapted from community discussion — Ahbey_911

   Next question

2. Question 52 · 229 in bank

   Which of the following BEST facilitates a privacy impact assessment (PIA)?

   • ACreating an information flow and repository to identify personal data being collected
   • BProviding privacy and awareness training for project managers and system owners
   • CComparing current privacy policies and procedures to industry benchmarks
   • DIdentifying key systems used for processing and storing personal data

   Show answer

   Answer: A

   Explanation

   A. Creating an information flow and repository to identify personal data being collected A Privacy Impact Assessment (PIA) is a systematic assessment of a project, system, or process to identify and mitigate privacy risks associated with the collection, use, and storage of personal data. To best facilitate a PIA, it's essential to understand the flow of personal data throughout the system or process being assessed. Creating an information flow and repository provides a clear visual representation of where personal data enters, traverses, and exits the system, and where it is stored. This allows for a comprehensive understanding of potential privacy risks and facilitates the assessment process.

   Source: Adapted from community discussion — Ahbey_911

   Next question

3. Question 53 · 229 in bank

   Which of the following is MOST important to ensure when reviewing processes associated with the destruction of data?

   • AThe destruction of data is performed on site.
   • BThe destruction of data is witnessed.
   • CThe destruction is performed by a certified provider.
   • DThe destruction method is approved by the data owner.

   Show answer

   Answer: C

   Next question

4. Question 54 · 229 in bank

   Which of the following is MOST important to ensure when developing a business case for the procurement of a new IT system that will process and store personal information?

   • AThe system architecture is clearly defined.
   • BA risk assessment has been completed.
   • CSecurity controls are clearly defined.
   • DData protection requirements are included.

   Show answer

   Answer: D

   Next question

5. Question 55 · 229 in bank

   Which of the following should be the PRIMARY consideration when evaluating transaction-based cloud solutions?

   • AService level agreements (SLAs)
   • BJoint data protection responsibilities
   • CData protection capabilities
   • DElasticity of the service offerings

   Show answer

   Answer: C

   Explanation

   C. Data protection capabilities While all the options are important considerations for cloud solutions, when evaluating transaction-based solutions, the primary focus should be on data protection capabilities. Transaction-based solutions typically involve the processing, storage, and transmission of data, and ensuring that this data remains confidential, integral, and available is paramount. Data protection capabilities encompass encryption, access controls, monitoring, and other security measures that ensure data safety in the cloud.

   Source: Adapted from community discussion — Ahbey_911

   Next question

6. Question 56 · 229 in bank

   A technology company has just launched a mobile application for tracking health symptoms. This application is built on a mobile device technology stack that allows users to share their location and details of their symptoms. Which of the following is the GREATEST privacy concern with collecting this data via mobile devices?

   • AClient-side device ID
   • BData storage requirements
   • CEncryption of key data elements
   • DData usage without consent

   Show answer

   Answer: D

   Next question

7. Question 57 · 229 in bank

   Which of the following is the BEST way to ensure privacy considerations are included when working with vendors?

   • AIncluding privacy requirements in the request for proposal (RFP) process
   • BMonitoring privacy-related service level agreements (SLAs)
   • CIncluding privacy requirements in vendor contracts
   • DRequiring vendors to complete privacy awareness training

   Show answer

   Answer: A

   Next question

8. Question 58 · 229 in bank

   Which of the following is MOST important to address in a privacy policy with respect to big data repositories of sales information?

   • AOverall data management strategy
   • BEncryption of data at rest
   • CTransparency with customers
   • DRetention of archived information

   Show answer

   Answer: C

   Next question

9. Question 59 · 229 in bank

   Which of the following is the PRIMARY privacy concern with the use of a data lake containing transaction data, including personal data?

   • AThe data lake retains all the organization's data.
   • BThe data lake supports all operational users.
   • CThe data lake receives data from all data sources.
   • DThe data lake supports all types of data structures.

   Show answer

   Answer: A

   Explanation

   A. The data lake retains all the organization's data. A data lake's ability to retain all of an organization's data, including personal data, poses a significant privacy concern. When personal data is retained indefinitely, it can increase the risk of unauthorized access, breaches, and non-compliance with data retention regulations. Proper data retention policies and practices are crucial to mitigate these risks. While the other options may pose operational or security concerns, the primary privacy concern is associated with indefinite retention of personal data.

   Source: Adapted from community discussion — Ahbey_911

   Next question

10. Question 60 · 229 in bank

    Which of the following needs to be identified FIRST to define the privacy requirements to use when assessing the selection of IT systems?

    • AType of data being processed
    • BApplicable control frameworks
    • CApplicable privacy legislation
    • DAvailable technology platforms

    Show answer

    Answer: C

    Explanation

    C. Applicable privacy legislation Before assessing the selection of IT systems based on privacy requirements, it's crucial to identify the applicable privacy legislation. Different jurisdictions have different privacy laws and regulations, and these laws define the requirements for the protection and handling of personal data. By first understanding these legal requirements, organizations can then determine the specific privacy features and controls that the IT systems need to have in place.

    Source: Adapted from community discussion — Ahbey_911

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 51. 229 questions available.