CDPSE Practice Questions

Which of the following is the GREATEST concern for an organization subject to cross-border data transfer regulations when using a cloud service provider to store and process data?

Which of the following is the GREATEST benefit of adopting data minimization practices?

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What s...

Which of the following vulnerabilities is MOST effectively mitigated by enforcing multi-factor authentication to obtain access to personal information?

Which of the following is the BEST way for an organization to limit potential data exposure when implementing a new application?

An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the tim...

What type of personal information can be collected by a mobile application without consent?

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

A new marketing application needs to use data from the organization's customer database. Prior to the application using the data, which of the following should be done FIRST?

Which of the following MUST be available to facilitate a robust data breach management response?

Which of the following zones within a data lake requires sensitive data to be encrypted or tokenized?

Which of the following poses the GREATEST privacy risk for client-side application processing?

Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?

Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

Within a business continuity plan (BCP), which of the following is the MOST important consideration to ensure the ability to restore availability and access to personal data in the...

In which of the following should the data record retention period be defined and established?

When tokenizing credit card data, what security practice should be employed with the original data before it is stored in a data lake?

Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?

Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?

What is the BEST way for an organization to maintain the effectiveness of its privacy breach incident response plan?

Which of the following is MOST important when developing an organizational data privacy program?

Which of the following should be considered personal information?

Which of the following techniques mitigates design flaws in the application development process that may contribute to potential leakage of personal data?

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

During which of the following system lifecycle stages is it BEST to conduct a privacy impact assessment (PIA) on a system that holds personal data?

Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

Which of the following is the BEST method to ensure the security of encryption keys when transferring data containing personal information between cloud applications?

When using pseudonymization to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

Which of the following is the BEST way to limit the organization's potential exposure in the event of consumer data loss while maintaining the traceability of the data?

Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase?

Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?

Which of the following is the PRIMARY benefit of implementing policies and procedures for system hardening?

Which of the following is the MOST important consideration when using advanced data sanitization methods to ensure privacy data will be unrecoverable?

An email opt-in form on a website applies to which privacy principle?

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Which of the following is the BEST approach for a local office of a global organization faced with multiple privacy-related compliance requirements?

Which of the following is the MOST important consideration when writing an organization's privacy policy?

Which of the following BEST supports an organization's efforts to create and maintain desired privacy protection practices among employees?

Which of the following hard drive sanitation methods provides an organization with the GREATEST level of assurance that data has been permanently erased?

Which of the following describes a user's "right to be forgotten"?

When choosing data sources to be used within a big data architecture, which of the following data attributes MUST be considered to ensure data is not aggregated?

Which of the following is the MOST important consideration to ensure privacy when using big data analytics?

An organization uses analytics derived from archived transaction data to create individual customer profiles for customizing product and service offerings. Which of the following i...

When a government's health division established the complete privacy regulation for only the health market, which privacy protection reference model is being used?

An organization is developing a wellness smartwatch application and is considering what information should be collected from the application users. Which of the following is the MO...

Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?

It is MOST important to consider privacy by design principles during which phase of the software development life cycle (SDLC)?

Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relatio...

Which of the following protocols BEST protects end-to-end communication of personal data?

An organization is planning a new implementation for tracking consumer web browser activity. Which of the following should be done FIRST?