CDPSEPreview

Before executive leadership approves a new data privacy policy, it is MOST important to ensure:

Which of the following is an IT privacy practitioner’s BEST recommendation to reduce privacy risk before an organization provides personal data to a third party?

Which of the following is a responsibility of the audit function in helping an organization address privacy compliance requirements?

An online retail company is trying to determine how to handle users’ data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

Which of the following should be done FIRST when developing an organization-wide strategy to address data privacy risk?

Which of the following is the BEST way to protect the privacy of data stored on a laptop in case of loss or theft?

Which of the following should be established FIRST before authorizing remote access to a data store containing personal data?

Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

Which of the following helps define data retention time is a stream-fed data lake that includes personal data?

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructured data as a major risk. What should be done FIRST to address this situation?

Which types of controls need to be applied to ensure accuracy at all stages of processing, storage, and deletion throughout the data life cycle?

Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

Which of the following should be done FIRST to establish privacy by design when developing a contact-tracing application?

A software development organization with remote personnel has implemented a third-party virtualized workspace to allow the teams to collaborate. Which of the following should be of GREATEST concern?

Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?

A migration of personal data involving a data source with outdated documentation has been approved by senior management. Which of the following should be done NEXT?

Which of the following is the best way to reduce the risk of compromised credentials when an organization allows employees to have remote access?

Which of the following is the PRIMARY objective of privacy incident response?

An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?

An organization has a policy requiring the encryption of personal data if transmitted through email. Which of the following is the BEST control to ensure the effectiveness of this policy?

Which of the following is MOST important to include when defining an organization’s privacy requirements as part of a privacy program plan?