CDPSE Practice Questions

Which of the following is the PRIMARY outcome of a privacy risk assessment?

A travel agency wants to introduce a new cloud application for customers to access while traveling. Which of the following would BEST help to protect the application against unauth...

Which of the following should be reviewed FIRST as part of an audit of controls implemented to mitigate data privacy risk?

Which of the following is the BEST solution for storing both non-relational and relational personal data from Internet of Things (IoT) devices, web sites, and mobile applications?

An organization is opening a new office in a country that has strict privacy regulations regarding consumer data. Which of the following is the BEST way for the senior leadership t...

Which of the following is the BEST control to mitigate the impact of credential harvesting attacks?

Which data warehousing operating model masks data within a larger database to provide subset views to users?

Which of the following is the PRIMARY consideration when managing consent for the use of an application targeted toward children?

An online business has implemented cookies in its retail website to track customer shopping behavior. Which of the following is the MOST important process to ensure customers' priv...

Privacy flaws can MOST effectively be minimized during which phase of the software development life cycle?

Which of the following BEST helps to determine appropriate access privileges for an application containing customer personal data?

In which of the following scenarios would implementing a machine learning algorithm for anomaly detection raise data privacy concerns?

An organization has confirmed a breach of personal data. Which of the following actions should be done NEXT?

Which of the following BEST ensures an organization takes a consistent approach to handling data subject rights requests?

A visitor approaches the security desk of a global bank to gain access to attend a meeting. The security desk personnel ask for an official form of identity. Which of the following...

Which of the following is the GREATEST privacy threat when an organization wants to leverage artificial intelligence (AI) for marketing purposes?

An enterprise is planning to introduce a new product that involves geolocation tracking of customers. Which of the following is the BEST way to determine the associated risk?

Which type of flaw in an application programming interface (API) allows an attacker to manipulate legitimate standard functionality?

Which of the following BEST mitigates the risk of users not understanding the purpose of their data being collected?

Which of the following BEST protects against unauthorized access to stored personal data?

Which of the following should be done FIRST when responding to a mandate to protect a critical application that was developed in-house?

Which of the following is the PRIMARY benefit of data flow mapping?

Following a merger and acquisition deal, an organization wants to integrate all customers into a single customer relationship management (CRM) system. Which of the following is the...

Which of the following techniques BEST protects the privacy of personal data accessed via system endpoints?

A recently issued privacy regulation requires that customer data be deleted within a certain timeframe upon customer request. What is an organization's MOST important consideration...

Which of the following is MOST important to review when determining the data lineage of a data element?

Which of the following is MOST useful for senior management to review when preparing to release a new service involving substantial use of personal data?

A payment processor is implementing a system that uses algorithms on transaction logs to detect potentially fraudulent activities. What is the BEST way to handle customer data in t...

Which of the following types of employee information requires the STRONGEST protection due to its sensitivity?

Which of the following is MOST important to help determine the controls required to secure the servers that support a customer portal?

Which of the following is a privacy by design principle?

Which of the following is the MOST essential attribute to distinguish between personal data protection and information security?

As part of network hardening it is MOST important to set up thresholds to trigger privacy alerts for:

Which of the following is the BEST way to mitigate privacy risk associated with application programming interfaces (APIs)?

An audit of an organization's customer relationship management (CRM) system revealed duplicate user accounts for many customers. Which of the following should be the IT privacy pra...

Which of the following is the GREATEST privacy risk factor for data stored on disk?

A bug has been identified in a third-party video library that could expose sensitive user data. Which of the following is the BEST recommendation to address this issue?

Which of the following is the PRIMARY reason that regulatory authorities would require permission for corporate use of drones with mounted video cameras for visual surveillance?

Which of the following should be an information security manager's PRIMARY focus when migrating data between two dissimilar systems?

Which of the following is the BEST way to protect the confidentiality of the information returned by a new application programming interface (API) integration?

Which of the following is MOST likely to be considered confidential data as opposed to personal information?

Rounding and nulling are examples of which type of data de-identification function?

Which of the following poses the GREATEST privacy risk for users of an application that collects their geolocation information?

Which of the following is the BEST indication that an organization needs to perform a privacy impact assessment (PIA)?

Which of the following BEST enables an IT privacy practitioner to ensure high quality and accurate personal data collection?

Which of the following should an organization do FIRST to mitigate the risk of employees mishandling personal data?

An organization has developed a tracking system to better understand customer purchasing behavior. Prior to deployment it is discovered that the consumer privacy policy does not pr...

An enterprise is planning to introduce a new product that involves geolocation tracking of customers. Which of the following is the BEST way to determine the associated risk?

Which of the following is the BEST information to use as a framework to evaluate an organization's data management practices?

Which of the following is MOST important to ensure when reviewing strategic customer decisions driven by predictive AI?