CDPSE practice questions 61–70

1. Question 61 · 229 in bank

   Which of the following is the BEST approach for configuring remote access rules to safeguard personal data within the organization's network?

   • AEncrypting personal data
   • BUsing a third-party remote server
   • CInstalling endpoint security
   • DEnabling strict authentication

   Show answer

   Answer: D

   Next question

2. Question 62 · 229 in bank

   Which of the following is the BEST way to validate that privacy practices align to the published enterprise privacy management program?

   • AConduct an audit.
   • BReport performance metrics.
   • CPerform a control self-assessment (CSA).
   • DConduct a benchmarking analysis.

   Show answer

   Answer: A

   Next question

3. Question 63 · 229 in bank

   Which of the following is defined and implemented to ensure organizational data privacy protection arrangements are maintained and enforced regardless of jurisdiction?

   • ARules for data subject requests
   • BBinding corporate rules
   • CPrivacy notice and consent rules
   • DRules for managing complaints

   Show answer

   Answer: C

   Explanation

   B. Binding corporate rules Binding corporate rules (BCRs) are internal rules adopted by multinational companies to ensure that their global intercompany transfers of personal data comply with EU data protection laws. They set out the company's approach to data protection and privacy, its commitments in this regard, and the rights of individuals whose personal data is transferred. Once approved by EU data protection authorities, BCRs provide a legal basis for intra-group international data transfers. In essence, BCRs ensure that all members of the global corporate group adhere to the same data protection standards, regardless of where they are located.

   Source: Adapted from community discussion — Ahbey_911

   Next question

4. Question 64 · 229 in bank

   Which type of data is produced by using a more complex method of analytics to find correlations between data sets and using them to categorize or profile people?

   • ADerived data
   • BObserved data
   • CInferred data
   • DProvided data

   Show answer

   Answer: C

   Next question

5. Question 65 · 229 in bank

   Which of the following is the BEST way to manage privacy risk associated with outsourcing to a third party?

   • AUtilize a variable sourcing strategy.
   • BReview and approve the vendor's privacy policies.
   • CRequire specific controls as part of the contract.
   • DPerform privacy audits of the vendor.

   Show answer

   Answer: C

   Next question

6. Question 66 · 229 in bank

   An organization’s new sales application asks for consent to collect consumer personal information. Which foundational privacy by design principle is this organization following?

   • ARespecting user privacy
   • BMaintaining visibility and transparency
   • CEmbedding privacy into system requirements
   • DEnsuring end-to-end security

   Show answer

   Answer: A

   Next question

7. Question 67 · 229 in bank

   Which of the following is the BEST example of risk-based data protection?

   • AData encryption
   • BData segmentation
   • CTransit-layer encryption
   • DData partitioning

   Show answer

   Answer: B

   Next question

8. Question 68 · 229 in bank

   Which of the following is the MOST important consideration when choosing a method for data destruction?

   • AGranularity of data to be destroyed
   • BTime required for the chosen method of data destruction
   • CValidation and certification of data destruction
   • DLevel and strength of current data encryption

   Show answer

   Answer: C

   Explanation

   Validation and certification of data destruction seems to be most correct. Being able to prove that the data is destroyed definitively is most important.

   Source: Adapted from community discussion — johnH123

   Next question

9. Question 69 · 229 in bank

   Which of the following is the BEST way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy strategy?

   • ARequire service level agreements (SLAs) to ensure data integrity while safeguarding confidentiality.
   • BRequire data dictionaries from service providers that handle the organization's personal data.
   • COutsource personal data processing to the same third party.
   • DRequire independent audits of the providers' data privacy controls.

   Show answer

   Answer: D

   Next question

10. Question 70 · 229 in bank

    Which of the following is the GREATEST benefit of adopting data minimization practices?

    • AStorage and encryption costs are reduced.
    • BData retention efficiency is enhanced.
    • CThe associated threat surface is reduced.
    • DCompliance requirements are met.

    Show answer

    Answer: C

    Explanation

    Data minimization involves collecting and retaining only the minimum amount of personal data necessary for a specific purpose. By limiting the amount of data stored and processed, organizations reduce the amount of data that could be exposed to potential threats like unauthorized access, breaches, or cyberattacks. A smaller threat surface means there are fewer opportunities for malicious actors to exploit vulnerabilities, making it the most significant benefit of data minimization from a security standpoint.

    Source: Adapted from community discussion — 4dfe785

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 61. 229 questions available.