CDPSE Practice Questions

Which of the following is the BEST control to secure application programming interfaces (APIs) that may contain personal information?

Which of the following rights is an important consideration that allows data subjects to request the deletion of their data?

A global organization is planning to implement a customer relationship management (CRM) system to be used in offices based in multiple countries. Which of the following is the MOST...

An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is...

Which of the following MOST effectively protects against the use of a network sniffer?

Which of the following is the BEST indication of an effective records management program for personal data?

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Which of the following helps to ensure the identities of individuals in two-way communication are verified?

Which of the following is the BEST way to hide sensitive personal data that is in use in a data lake?

A global financial institution is implementing data masking technology to protect personal data used for testing purposes in non-production environments. Which of the following is...

Which of the following is the BEST way to manage different IT staff access permissions for personal data within an organization?

Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

Which of the following is the PRIMARY reason to complete a privacy impact assessment (PIA)?

How can an organization BEST ensure its vendors are complying with data privacy requirements defined in their contracts?

Before executive leadership approves a new data privacy policy, it is MOST important to ensure:

Which of the following is an IT privacy practitioner's BEST recommendation to reduce privacy risk before an organization provides personal data to a third party?

Which of the following is a responsibility of the audit function in helping an organization address privacy compliance requirements?

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST a...

Which of the following should be done FIRST when developing an organization-wide strategy to address data privacy risk?

Which of the following is the BEST way to protect the privacy of data stored on a laptop in case of loss or theft?

Which of the following should be established FIRST before authorizing remote access to a data store containing personal data?

Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructu...

Which types of controls need to be applied to ensure accuracy at all stages of processing, storage, and deletion throughout the data life cycle?

Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

Which of the following should be done FIRST to establish privacy to design when developing a contact-tracing application?

A software development organization with remote personnel has implemented a third-party virtualized workspace to allow the teams to collaborate. Which of the following should be of...

Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?

A migration of personal data involving a data source with outdated documentation has been approved by senior management. Which of the following should be done NEXT?

Which of the following is the best way to reduce the risk of compromised credentials when an organization allows employees to have remote access?

Which of the following is the PRIMARY objective of privacy incident response?

An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

An organization has a policy requiring the encryption of personal data if transmitted through email. Which of the following is the BEST control to ensure the effectiveness of this...

Which of the following helps to ensure the identities of individuals in a two-way communication are verified?

Which of the following is the BEST practice to protect data privacy when disposing removable backup media?

Which of the following should be done FIRST before an organization migrates data from an on- premise solution to a cloud-hosted solution that spans more than one jurisdiction?

Which of the following is the MOST effective way to support organizational privacy awareness objectives?

Which of the following assurance approaches is MOST effective in identifying vulnerabilities within an application programming interface (API) transferring personal data?

Which of the following activities would BEST enable an organization to identify gaps in its privacy posture?

Which of the following is the BEST way to address threats to mobile device privacy when using beacons as a tracking technology?

Which of the following BEST enables an organization to ensure privacy-related risk responses meet organizational objectives?

Which of the following technologies BEST facilitates protection of personal data?

Which of the following is the MOST important consideration when choosing a method for data destruction?

A multi-national organization has decided that regional human resources (HR) team members must be limited in their access to employee data only within their regional office. Which...

Which of the following provides the BEST assurance that a potential vendor is able to comply with privacy regulations and the organization's data privacy policy?

The BEST way for a multinational organization to ensure the comprehensiveness of its data privacy policy is to perform an annual review of changes to privacy regulations in.

Using hash values With stored personal data BEST enables an organization to

To ensure the protection of personal data, privacy policies should mandate that access to information system applications be authorized by the.

Which of the following is MOST important to include in a data use policy?

Which of the following is MOST important to capture in the audit log of an application hosting personal data?