CDPSE Practice Questions

Which of the following should an organization do FIRST to ensure it can respond to all data subject access requests in a timely manner?

A technology company has just launched a mobile application tor tracking health symptoms_ This application is built on a mobile device technology stack that allows users to share t...

Which of the following is the BEST way for senior management to verify the success of its commitment to privacy by design?

Which of the following is the BEST way to explain the difference between data privacy and data security?

An organization is considering the use of remote employee monitoring software. Which of the following is the MOST important privacy consideration when implementing this solution?

Which of the following is the BEST way to reduce the risk of compromise when transferring personal information using email?

Which of the following is an example of data anonymization as a means to protect personal data when sharing a database?

Which of the following BEST enables an organization to ensure consumer credit card numbers are accurately captured?

Which of the following is the BEST course of action to prevent false positives from data loss prevention (DLP) tools?

When contracting with a Software as a Service (SaaS) provider, which of the following is the MOST important contractual requirement to ensure data privacy at service termination?

A project manager for a new data collection system had a privacy impact assessment (PIA) completed before the solution was designed. Once the system was released into production, a...

Which of the following should an IT privacy practitioner review FIRST to understand where personal data is coming from and how it is used within the organization?

Which of the following is the FIRST step toward the effective management of personal data assets?

Which of the following should be done FIRST when performing a data quality assessment?

Which of the following is a foundational goal of data privacy laws?

Which of the following is the MOST effective remote access model for reducing the likelihood of attacks originating from connecting devices?

Which of the following is the PRIMARY reason for an organization to use hash functions when hardening application systems involved in biometric data processing?

When is the BEST time during the secure development life cycle to perform privacy threat modeling?

Which of the following is BEST used to validate compliance with agreed-upon service levels established with a third party that processes personal data?

Which of the following BEST ensures an effective data privacy policy is implemented?

Which type of data is produced by using a more complex method of analytics to find correlations between data sets and using them to categorize or profile people?

Which of the following is a PRIMARY element of application and software hardening?

A mortgage lender has created an online application that collects borrower information and delivers a mortgage decision automatically based on criteria set by the lender. Which fun...

Which of the following is the BEST way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy strategy?

An organization must de-identify its data before it is transferred to a third party. Which of the following should be done FIRST?

Which of the following is the MOST important consideration for developing data retention requirements?

Which of the following is the MOST important action to protect a mobile banking app and its data against manipulation and disclosure?

Which of the following BEST mitigates the privacy risk associated with setting cookies on a website?

Which of the following is the MOST important attribute of a privacy policy?

Which of the following is the GREATEST privacy risk associated with the use of application programming interfaces (APIs)?

An organization's work-from-home policy allows employees to access corporate IT assets remotely Which of the following controls is MOST important to mitigate the risk of potential...

Which of the following should be done NEXT after a privacy risk has been accepted?

Which of the following is MOST important to review before using an application programming interface (API) to help mitigate related privacy risk?

Which of the following is the BEST way to address privacy concerns when an organization captures personal data from a third party through an open application programming interface...

Which of the following needs to be identified FIRST to define the privacy requirements to use when assessing the selection of IT systems?

The MOST effective way to incorporate privacy by design principles into applications is to include privacy requirements in.

Which of the following should be done FIRST when a data collection process is deemed to be a high-level risk?

An organization has an initiative to implement database encryption to strengthen privacy controls. Which of the following is the MOST useful information for prioritizing database s...

Which of the following is the BEST method of data sanitization when there is a need to balance the destruction of data and the ability to recycle IT assets?

Which of the following is the MOST important privacy consideration for video surveillance in high security areas?

Which of the following is the PRIMARY reason to use public key infrastructure (PRI) for protection against a man-in-the-middle attack?

Which of the following scenarios should trigger the completion of a privacy impact assessment (PIA)?

When can data subjects be prohibited from withdrawing consent for processing their personal data?

Which of the following is the BEST way for an organization to gain visibility into Its exposure to privacy-related vulnerabilities?

An organization has initiated a project to enhance privacy protections by improving its information security controls. Which of the following is the MOST useful action to help defi...

Which of the following is the BEST way to ensure privacy considerations are included when working with vendors?

Which of the following is the BEST control to detect potential internal breaches of personal data?

From a privacy perspective, it is MOST important to ensure data backups are:

A data processor that handles personal data tor multiple customers has decided to migrate its data warehouse to a third-party provider. What is the processor obligated to do prior...

Which of the following BEST ensures an organization's data retention requirements will be met in the public cloud environment?