CDPSE Practice Questions

Which of the following controls BEST helps to maintain the integrity of customer information?

An organization's privacy office is planning to conduct privacy awareness training for all staff. Which of the following topics is MOST important to include to help improve data pr...

Which of the following should be done FIRST when creating specialized training for employees with key duties to protect personal data?

An organization is considering the use of generative AI to create realistic marketing content, such as personalized product descriptions. Which of the following is the MOST importa...

In a system implementation project where production data must be used for testing, which of the following practices would MOST effectively protect customer data privacy?

Which privacy-enhancing technology (PET) BEST enables third parties to process and manipulate data in its encrypted form?

Which of the following assurance approaches is MOST effective in identifying vulnerabilities within an application programming interface (API) transferring personal data?

Zero-knowledge proofs, secure multi-party computation, and homomorphic encryption are examples of:

Consent MUST be obtained from a data subject when:

During which of the following system life cycle stages is it BEST to identify privacy controls for a machine learning (ML) model that consumes personal data?

Of the following, who is BEST suited to verify the quality of personal data following a merger and acquisition integration?

Which type of information requires the HIGHEST level of protection from a privacy perspective?

A privacy practitioner has been asked to develop a privacy program for a client that has new privacy requirements due to its expansion into a new geographic region. Which of the fo...

An organization is planning to implement an IT solution based on Internet of Things (IoT) tracking technology. Which of the following is the GREATEST risk associated with this solu...

What solution set should an organization implement to BEST ensure its data privacy activities are being centralized?

Which of the following domains is the foundation for the execution of all other security and privacy operations?

Which of the following is the PRIMARY reason asset management is important to a privacy program?

Which strategy would be MOST effective for an organization to enhance privacy in machine learning (ML) model deployment?

Which of the following provides the MOST useful information when determining the scope of a privacy audit?

Which of the following is the BEST source for forensic and analytic information when an organization is investigating suspicious activities from corporate-owned laptops?

Which of the following is a privacy-enhancing technology (PET)?

Which of the following BEST illustrates privacy by design in the development of a consumer mobile application?

Which of the following can BEST identify failures of enterprise architecture (EA) to support privacy by design principles?

Which of the following artifacts is MOST important for demonstrating compliance with privacy regulations when deploying off-premise cloud solutions?

Which of the following is MOST important for an organization to include in its website's cookie policy?

Which of the following is the MOST important privacy consideration when selecting a system architecture for a human resources information system?

A request for consent to collect personal data MUST:

Which of the following characteristics of a cloud service provider (CSP) poses the GREATEST privacy-related compliance risk?

Which of the following practices BEST indicates an organization follows the data minimization principle?

Which of the following is the BEST way to identify vulnerabilities in an organization's web application that processes personal data?

When capturing browsing and purchase data from consumers visiting a corporate website more than once, which of the following metadata-based technologies is typically used to identi...

Which of the following BEST enables an organization to manage privacy risk consistently over time?

An organization is implementing database servers that will store personal data within a hosting environment. Which of the following is MOST important to incorporate to help ensure...

Which of the following strategies BEST mitigates the risks associated with exploiting the capabilities of generative AI for cyberattacks?

An organization identifies a risk that data subject access requests may not be managed within the regulatory timeline. The organization decides to outsource the data subject access...

Which of the following is the FIRST step to protect data subject privacy when planning the deployment of a public monitoring system?

Which of the following is the MOST important course of action to establish an effective process for identifying and managing privacy risk across an organization?

An assessment of an organization's cloud infrastructure has determined that for some services, the metadata of some transactions is transmitted through different jurisdictions. Whi...

Which of the following is the BEST approach for an organization looking to share privacy risk?

Which of the following MOST effectively ensures data privacy when sharing datasets for machine learning (ML) model training?

Which of the following is the MOST important consideration when processing personal data for an AI project?

An organization is considering whether to expand its operations into additional international jurisdictions. After performing a privacy risk assessment, the organization decides no...

Which of the following would BEST ensure privacy when utilizing AI-based technologies?

Which of the following privacy-enhancing technologies (PETs) is MOST effective for ensuring individual data records cannot be linked back to specific individuals in a dataset?

Which of the following can be used to assist with identity verification without access to the actual data?

Which of the following is MOST suitable for facilitating and reporting to senior management on the enterprise privacy posture over time?

Which of the following is the BEST way to ensure privacy is embedded into the training of an AI model?

Which of the following is the BEST approach for an organization that wants to transfer risk associated with a potential breach involving customer personal data?

A staffing agency collects a broad scope of data on candidates (including education, credit, and medical history). This may violate which of the following data privacy principles?

Which of the following can BEST help an organization ensure that it maintains accurate and up- to-date data inventory records?