CDPSE Practice Questions

When data processing is performed at a third-party data center, ownership of the risk PRIMARILY rests with the:

Which of the following should be the PRIMARY consideration when evaluating transaction-based cloud solutions?

A technology company has just launched a mobile application for tracking health symptoms. This application is built on a mobile device technology stack that allows users to share t...

Which of the following is the MOST effective use of data flow diagrams when implementing a data privacy compliance program?

Which of the following is MOST important to address in a privacy policy with respect to big data repositories of sales information?

Which of the following is the PRIMARY privacy concern with the use of a data lake containing transaction data, including personal data?

Which of the following is the BEST approach for configuring remote access rules to safeguard personal data within the organization's network?

Notice was provided to everyone visiting a company's website indicating what personal data was being collected and for what purpose it was being used. The IT department recently re...

Which of the following is defined and implemented to ensure organizational data privacy protection arrangements are maintained and enforced regardless of jurisdiction?

Which of the following is the BEST way to manage privacy risk associated with outsourcing to a third party?

Which of the following is the MOST effective approach to identify personal data stored as unstructured data?

An organization's new sales application asks for consent to collect consumer personal information. Which foundational privacy by design principle is this organization following?

Which of the following is the BEST example of risk-based data protection?

When using a digital signature, which of the following keys will the recipient need to verify the authenticity of the sender's message?

An organization that stores personal information is receiving an excessive number of alerts from its intrusion detection system (IDS), causing follow-through to become unfeasible....

Which of the following is the GREATEST concern with using degaussing to destroy personal data?

Which of the following statements BEST differentiates sensitive personal data from other types of confidential data?

A debt collection agency is attempting to locate a debtor and collects information on several people with similar names. During the inquiry, some of these people are discounted. Ho...

An organization is designing a new human resources (HR) system. Which of the following should be implemented to BEST enable detection of unauthorized access to personal data?Data l...

Which of the following BEST demonstrates that security considerations are embedded in DevOps operations for application development?

An organization wants to change the originally specified purpose of collected personal data. What must be done NEXT?

An organization wants to implement a cloud application with a REST application programming interface (API). Which of the following BEST protects against unauthorized access to the...

Which of the following roles is responsible for establishing procedures that address the use of personal data for continuous auditing?

A data subject has requested the personal data an organization has collected on them. Which of the following should be done FIRST when responding to this request?

Which of the following would BEST enable a data warehouse to limit access to individual database objects?

Which of the following BEST enables an organization to comply with data privacy laws?

A retail company handles payroll accounting for its employees through a Software as a Service (SaaS) provider that uses a data center operator as a subcontractor. Who is responsibl...

Which of the following is MOST important to consider when setting priorities for privacy data management objectives?

Which of the following should be the FIRST consideration prior to implementing an audit trail of access to personal data?

During which stage of the software development life cycle (SDLC) is it MOST critical to conduct a privacy impact assessment (PIA)?

Which method BEST reduces the risk related to sharing of personal data between a software as a service (SaaS) customer and the third party storing it?

A material finding related to the integrity of personal data was discovered during a privacy audit. Which of the following should the IT privacy practitioner do FIRST?

At a minimum, records metadata in data retention files should include:

Which of the following is the MOST important key management practice when deploying cryptography for protecting personal data?

Which of the following BEST facilitates an organization's ability to achieve data privacy-related goals?

An employee accidentally sends an email with personal data to the wrong person. Which of the following should the employee do FIRST upon becoming aware of the issue?

Which of the following is MOST useful for understanding an organization's approach towards privacy compliance?

Which of the following is the PRIMARY reason to allow data transfer between regions?

Which of the following is the BEST course of action to manage privacy risk when a significant vulnerability is identified in the operating system (OS) that supports an organization...

In a contract for cloud services, whom should a cloud provider agree to notify in the event of a personal data breach?

Which of the following BEST prevents users from sending out customers' personal data without encryption?

Which of the following would BEST enable an organization to account for unstructured data?

To increase productivity, an organization is planning to implement movement tracking devices in the vehicles of field employees. Which of the following MUST be in place before inst...

Which of the following is the MOST effective way to prevent employees from inappropriately accessing customer information?

Which of the following is the BEST way to prevent dangerous SQL write statements from being executed on data?

Which of the following should be done FIRST before an organization migrates data from an on- premise solution to a cloud-hosted solution that spans more than one jurisdiction?

Of the following, who is the BEST resource for determining which privacy laws must be followed for data that crosses international borders?

Which of the following is the BEST control to mitigate a distributed denial of service (DDoS) attack on an application programming interface (API)?

Which of the following is MOST important when creating a data retention policy?

Which of the following documents should be communicated to customers to establish accountability for the use and protection of personal information?