CDPSE Practice Exam — Free Isaca Certification Prep

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

374Practice Questions

3Study Modes

Free

TopicSort

Question 1

Privacy Risk Management and Compliance

Which of the following is the GREATEST privacy concern for an organization implementing endpoint detection response (EDR) tools on employee laptops?

A Lack of an acknowledged user acceptance policy
B Unclear monitoring scope
C Poor controls on privileged access to EDR tools
D Lack of up-to-date EDR capability on employee laptops

Question 2

Privacy Risk Management and Compliance

Question 3

Privacy Engineering

Question 4

Privacy Risk Management and Compliance

Question 5

Privacy Governance

Question 6

Privacy Engineering

Question 7

Privacy Risk Management and Compliance

Question 8

Privacy Engineering

Question 9

Privacy Engineering

Question 10

Privacy Risk Management and Compliance

Question 11

Privacy Governance

Question 12

Privacy Governance

Question 13

Privacy Risk Management and Compliance

Question 14

Privacy Risk Management and Compliance

Question 15

Data Life Cycle Management

Question 16

Data Life Cycle Management

Question 17

Privacy Risk Management and Compliance

Question 18

Privacy Governance

Question 19

Privacy Risk Management and Compliance

Question 20

Privacy Engineering

Question 21

Privacy Governance

Question 22

Privacy Governance

Question 23

Privacy Risk Management and Compliance

Question 24

Privacy Risk Management and Compliance

Question 25

Privacy Engineering

Page 1 of 15 • Questions 1-25 of 374

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Which of the following BEST facilitates a privacy impact assessment (PIA)?

A Creating an information flow and repository to identify personal data being collected
B Providing privacy and awareness training for project managers and system owners
C Comparing current privacy policies and procedures to industry benchmarks
D Identifying key systems used for processing and storing personal data

Which of the following BEST represents privacy threat modeling methodology?

A Mitigating inherent risks and threats associated with privacy control weaknesses
B Systematically eliciting and mitigating privacy threats in a software architecture
C Reliably estimating a threat actor’s ability to exploit privacy vulnerabilities
D Replicating privacy scenarios that reflect representative software usage

What is the BEST way for an organization to maintain the effectiveness of its privacy breach incident response plan?

A Require security management to validate data privacy security practices.
B Involve the privacy office in an organizational review of the incident response plan.
C Hire a third party to perform a review of data privacy processes.
D Conduct annual data privacy tabletop exercises.

Which of the following is MOST important when developing an organizational data privacy program?

A Obtaining approval from process owners
B Profiling current data use
C Following an established privacy framework
D Performing an inventory of all data

Question 6

Privacy Engineering

Question 7

Privacy Risk Management and Compliance

Question 8

Privacy Engineering

Question 9

Privacy Engineering

Question 10

Privacy Risk Management and Compliance

Question 11

Privacy Governance

Question 12

Privacy Governance

Question 13

Privacy Risk Management and Compliance

Question 14

Privacy Risk Management and Compliance

Question 15

Data Life Cycle Management

Question 16

Data Life Cycle Management

Question 17

Privacy Risk Management and Compliance

Question 18

Privacy Governance

Question 19

Privacy Risk Management and Compliance

Question 20

Privacy Engineering

Question 21

Privacy Governance

Question 22

Privacy Governance

Question 23

Privacy Risk Management and Compliance

Question 24

Privacy Risk Management and Compliance

Question 25

Privacy Engineering

It is MOST important to consider privacy by design principles during which phase of the software development life cycle (SDLC)?

A Application design
B Requirements definition
C Implementation
D Testing

Which of the following is the PRIMARY reason to complete a privacy impact assessment (PIA)?

A To comply with consumer regulatory requirements
B To establish privacy breach response procedures
C To classify personal data
D To understand privacy risks

Which of the following is the BEST way to convert personal information to non-personal information?

A Encryption
B Pseudonymization
C Hashing
D Anonymization

What is the BEST method for protecting data transmissions to devices in the field?

A Multi-factor authentication
B Transport Layer Security (TLS)
C Application level authentication
D Hypertext Transfer Protocol Secure (HTTPS)

Which of the following is the BEST control to detect potential internal breaches of personal data?

A Data loss prevention (DLP) systems
B Classification of data
C Employee background checks
D User behavior analytics tools

Which of the following is the BEST way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy strategy?

A Require service level agreements (SLAs) to ensure data integrity while safeguarding confidentiality.
B Require data dictionaries from service providers that handle the organization's personal data.
C Outsource personal data processing to the same third party.
D Require independent audits of the providers' data privacy controls.

Which of the following is the BEST indication of a highly effective privacy training program?

A Members of the workforce understand their roles in protecting data privacy.
B HR has made privacy training an annual mandate for the organization.
C Recent audits have no findings or recommendations related to data privacy.
D No privacy incidents have been reported in the last year.

An organization decides to outsource its customer personal data analytics to a third party to understand spending habits. Which of the following is the MOST important contractual consideration?

A Platform architecture used to process the data
B Terms for continuous monitoring of the vendor
C Clearly defined data responsibilities of all parties
D The vendor's vulnerability management program

Which of the following is the BEST way to address threats to mobile device privacy when using beacons as a tracking technology?

A Disable location services.
B Enable Trojan scanners.
C Enable antivirus for mobile devices.
D Disable Bluetooth services.

Which of the following is the BEST method of data sanitization when there is a need to balance the destruction of data and the ability to recycle IT assets?

A Factory reset
B Degaussing
C Cryptographic erasure
D Data deletion

Which of the following is MOST important to ensure when reviewing processes associated with the destruction of data?

A The destruction of data is performed on site.
B The destruction of data is witnessed.
C The destruction is performed by a certified provider.
D The destruction method is approved by the data owner.

Which of the following should be the PRIMARY consideration when evaluating transaction-based cloud solutions?

A Service level agreements (SLAs)
B Joint data protection responsibilities
C Data protection capabilities
D Elasticity of the service offerings

Which of the following is MOST important to address in a privacy policy with respect to big data repositories of sales information?

A Overall data management strategy
B Encryption of data at rest
C Transparency with customers
D Retention of archived information

Which of the following is the PRIMARY privacy concern with the use of a data lake containing transaction data, including personal data?

A The data lake retains all the organization's data.
B The data lake supports all operational users.
C The data lake receives data from all data sources.
D The data lake supports all types of data structures.

Which of the following needs to be identified FIRST to define the privacy requirements to use when assessing the selection of IT systems?

A Type of data being processed
B Applicable control frameworks
C Applicable privacy legislation
D Available technology platforms

Which of the following is defined and implemented to ensure organizational data privacy protection arrangements are maintained and enforced regardless of jurisdiction?

A Rules for data subject requests
B Binding corporate rules
C Privacy notice and consent rules
D Rules for managing complaints

Which of the following is the MOST effective way to support organizational privacy awareness objectives?

A Funding in-depth training and awareness education for data privacy staff
B Implementing an annual training certification process
C Including mandatory awareness training as part of performance evaluations
D Customizing awareness training by business unit function

In a contract for cloud services, whom should a cloud provider agree to notify in the event of a personal data breach?

A Its client’s end users
B Its client’s insurance carrier
C Its client’s regulatory authority
D Its client

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructured data as a major risk. What should be done FIRST to address this situation?

A Identify sensitive unstructured data at the point of creation.
B Classify sensitive unstructured data.
C Identify who has access to sensitive unstructured data.
D Assign an owner to sensitive unstructured data.

Which of the following should be done FIRST to establish privacy by design when developing a contact-tracing application?

A Conduct a privacy impact assessment (PIA).
B Conduct a development environment review.
C Identify privacy controls for the application.
D Identify differential privacy techniques.

Join Us Among the Stars

CDPSEPreview

About the CDPSE Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25