CDPSE practice questions 71–80

1. Question 71 · 229 in bank

   Which of the following is the GREATEST concern with using degaussing to destroy personal data?

   • AIt is difficult to verify data destruction.
   • BIt takes a long time to destroy the data.
   • CThe drive can be reused for future storage.
   • DThe interconnected equipment of the hard drive is preserved.

   Show answer

   Answer: A

   Next question

2. Question 72 · 229 in bank

   Which of the following statements BEST differentiates sensitive personal data from other types of confidential data?

   • AThe legal department is accountable for protecting sensitive personal data.
   • BMasking techniques are only applicable to the protection of sensitive personal data.
   • CSensitive personal data merits a higher level of protection.
   • DSensitive personal data requires deletion beyond the retention period by law.

   Show answer

   Answer: C

   Next question

3. Question 73 · 229 in bank

   Which of the following is the MOST effective remote access model for reducing the likelihood of attacks originating from connecting devices?

   • ARemote wide area network (WAN) links
   • BThin client remote desktop protocol (RDP)
   • CSite-to-site virtual private network (VPN)
   • DThick client desktop with virtual private network (VPN) connection

   Show answer

   Answer: C

   Explanation

   B. Thin client remote desktop protocol (RDP): Thin clients are generally considered more secure than thick clients because they minimize the amount of data and application processing done on the endpoint device. With a thin client, sensitive data and applications remain on the server, reducing the attack surface of the connecting device. If a thin client device is compromised, the impact is limited, as it does not store data locally. This significantly reduces the risk of attacks originating from the endpoint.

   Source: Adapted from community discussion — 821bbab

   Next question

4. Question 74 · 229 in bank

   A debt collection agency is attempting to locate a debtor and collects information on several people with similar names. During the inquiry, some of these people are discounted. How should the agency decide what data is adequate, relevant, and limited?

   • AThe agency should keep only the minimum data needed to form a basic record of people removed from the search.
   • BThe agency should delete all personal data collected after the debtor is found.
   • CThe agency should keep the data collected but store in an anonymized format.
   • DThe agency should keep the data collected and mark an indication on the people removed from the search.

   Show answer

   Answer: A

   Next question

5. Question 75 · 229 in bank

   An organization is designing a new human resources (HR) system. Which of the following should be implemented to BEST enable detection of unauthorized access to personal data?

   • AData loss prevention (DLP) solution
   • BSecurity information and event management (SIEM) solution
   • CVulnerability scanning and management software
   • DWeb application firewall (WAF)

   Show answer

   Answer: B

   Next question

6. Question 76 · 229 in bank

   Which of the following BEST demonstrates that security considerations are embedded in DevOps operations for application development?

   • AThe compliance team is involved in both pre-implementation and post-implementation stages.
   • BApplication hardening is performed before rollout of the application.
   • CCode review is conducted during the software development life cycle (SDLC).
   • DThe engineering team has been trained on security and privacy policies.

   Show answer

   Answer: C

   Next question

7. Question 77 · 229 in bank

   An organization wants to change the originally specified purpose of collected personal data. What must be done NEXT?

   • ANotify data protection authorities.
   • BObtain consent from data subjects.
   • CUpdate the enterprise data architecture.
   • DRevise the privacy notice.

   Show answer

   Answer: D

   Next question

8. Question 78 · 229 in bank

   Which of the following should be the FIRST consideration when conducting a privacy impact assessment (PIA)?

   • AThe applicable privacy legislation
   • BThe quantity of information within the scope of the assessment
   • CThe systems in which privacy-related data is stored
   • DThe organizational security risk profile

   Show answer

   Answer: A

   Next question

9. Question 79 · 229 in bank

   Which of the following would BEST enable a data warehouse to limit access to individual database objects?

   • APrivate storage volumes
   • BVirtual private database
   • CDatabase privacy firewall
   • DData control dictionary

   Show answer

   Answer: B

   Next question

10. Question 80 · 229 in bank

    Which of the following BEST enables an organization to comply with data privacy laws?

    • AMandating frequent organization-wide privacy training
    • BCreating a matrix of data privacy regulations
    • CLimiting the data that the organization maintains
    • DImplementing strong identity and access controls

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 71. 229 questions available.