CDPSE Practice Questions

Which of the following is the MOST important privacy consideration when developing a contact tracing application?

An organization Wishes to deploy strong encryption to its most critical and sensitive databases. Which of the following is the BEST way to safeguard the encryption keys?

An IT privacy practitioner wants to test an application in pre-production that will be processing sensitive personal data. Which of the following testing methods is BEST used to id...

What is the BES T way for an organization to maintain the effectiveness of its privacy breach incident response plan?

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

Which of the following is a role PRIMARILY assigned to an internal data owner?

Which of the following practices BEST indicates an organization follows the data minimization principle?

An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the tim...

Which of the following is the BEST indication of a highly effective privacy training program?

Which encryption method encrypts and decrypts data using two separate yet mathematically connected cryptographic keys?

A health organization experienced a breach of a database containing pseudonymized personal data. Which of the following should be of MOST concern to the IT privacy practitioner?

Which of the following information would MOST likely be considered sensitive personal data?

Within a regulatory and legal context, which of the following is the PRIMARY purpose of a privacy notice sent to customers?

Transport Layer Security (TLS) provides data integrity through:

Which of the following outputs of a privacy audit is MOST likely to trigger remedial action?

Which of the following is the BEST control to prevent the exposure of personal information when redeploying laptops within an organization?

Critical data elements should be mapped to which of the following?

Which of the following is the BEST way to ensure an organization's enterprise risk management (ERM) framework can protect the organization from privacy harms?

A privacy risk assessment identified that a third-party collects personal data on the organization's behalf. This finding could subject the organization to a regulatory fine for no...

Which of the following MOST significantly impacts an organization's ability to respond to data subject access requests?

Which of the following has the GREATEST impact on the treatment of data within the scope of an organization's privacy policy?

Which cloud deployment model is BEST for an organization whose main objectives are to logically isolate personal data from other tenants and adopt custom privacy controls for the d...

Which of the following helps define data retention time in a stream-fed data lake that includes personal data?

An organization plans to implement a new cloud-based human resources (HR) solution with a mobile application interface. Which of the following is the BEST control to prevent data l...

Which of the following is MOST important to capture in the audit log of an application hosting personal data?

Which of the following is the MOST important consideration for determining the operational life of an encryption key?

Which of the following is the BEST way to ensure that application hardening is included throughout the software development life cycle (SDLC)?

An increase in threats originating from endpoints is an indication that:

Which of the following BEST illustrates privacy by design in the development of a consumer mobile application?

Who is ULTIMATELY accountable for the protection of personal data collected by an organization?

Which of the following principles is MOST important to apply when granting access to an enterprise resource planning (ERP) system that contains a significant amount of personal dat...

What would be the BEST reason to include log generation in the design of a system from a privacy perspective?

An attacker was able to retrieve data from a test and development environment that contained end user information. Which of the following hardening techniques would BEST prevent th...

What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employ...

Which of the following should be the FIRST consideration when conducting a privacy impact assessment (PIA)?

Which of the following BEST represents privacy threat modeling methodology?

An organization is creating a personal data processing register to document actions taken with personal data. Which of the following categories should document controls relating to...

Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization's privacy notice. Which of the following is the BEST...

During the design of a role-based user access model for a new application, which of the following principles is MOST important to ensure data privacy is protected?

Which of the following should FIRST be established before a privacy office starts to develop a data protection and privacy awareness campaign?

Which of the following features should be incorporated into an organization's technology stack to meet privacy requirements related to the rights of data subjects to control their...

Who is accountable for establishing the privacy risk and harm tolerance levels?

How should the chief privacy officer of an international enterprise BEST balance the requirements of the enterprise's privacy standards with local regulations?

What is one of the GREATEST concerns for the privacy professional when using data analytics in an enterprise?

What requirements would be BEST to include in a service level agreement when data is regularly moved outside of the enterprise as part of its life cycle?

Which of the following should an IT privacy practitioner do FIRST following a decision to expand remote working capability to all employees due to a global pandemic?

When using anonymization techniques to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately pro...

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Which of the following BEST enables an IT privacy practitioner to ensure appropriate protection for personal data collected that is required to provide necessary services?

Which of the following tracking technologies associated with unsolicited targeted advertisements presents the GREATEST privacy risk?