CDPSE Dumps 2022 - New ISACA CDPSE Exam Questions
Free CDPSE Braindumps Download Updated on Mar 16, 2022 with 122 Questions
NEW QUESTION 53
Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?
- A. To assess privacy risks
- B. To evaluate effectiveness of data controls
- C. To comply with regulations
- D. To determine data integration gaps
Answer: A
NEW QUESTION 54
Which of the following is the BEST indication of an effective records management program for personal data?
- A. The legal department has approved the retention policy.
- B. All sensitive data has been tagged.
- C. Archived data is used for future analytics.
- D. A retention schedule is in place.
Answer: D
NEW QUESTION 55
Which of the following zones within a data lake requires sensitive data to be encrypted or tokenized?
- A. Raw zone
- B. Temporal zone
- C. Clean zone
- D. Trusted zone
Answer: B
NEW QUESTION 56
Which of the following is the GREATEST concern for an organization subject to cross-border data transfer regulations when using a cloud service provider to store and process data?
- A. Personal data stored on the cloud has not been anonymized.
- B. The service provider has denied the organization's request for right to audit.
- C. The extent of the service provider's access to data has not been established.
- D. The data is stored in a region with different data protection requirements.
Answer: D
NEW QUESTION 57
Which of the following is the GREATEST benefit of adopting data minimization practices?
- A. Storage and encryption costs are reduced.
- B. Compliance requirements are met.
- C. The associated threat surface is reduced.
- D. Data retention efficiency is enhanced.
Answer: D
Explanation:
Unfortunately, the financial liability portion of retained personal information rarely shows up on an organization's financial balance sheet. And yet it is indeed a liability: the impact on an organization when cybercriminals steal that information or when the information is misused is real, in the form of breach response costs, the costs related to reducing harm inflicted on affected parties (think of credit monitoring services, a frequent remedy for stolen credit card numbers), fines from governmental regulators, and the occasional class-action lawsuit.
NEW QUESTION 58
An organization is creating a personal data processing register to document actions taken with personal dat a. Which of the following categories should document controls relating to periods of retention for personal data?
- A. Data storage
- B. Data acquisition
- C. Data input
- D. Data archiving
Answer: D
Explanation:
However, the risks associated with long-term retention have compelled organizations to consider alternatives; one is data archival, the process of preparing data for long-term storage. When organizations are bound by specific laws to retain data for many years, archival provides a viable opportunity to remove data from online transaction systems to other systems or media.
NEW QUESTION 59
Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?
- A. Data custodian
- B. Data processor
- C. Privacy data analyst
- D. Data owner
Answer: D
NEW QUESTION 60
An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?
- A. Lawfulness and fairness
- B. Data use limitation
- C. Data integrity and confidentiality
- D. System use requirements
Answer: C
NEW QUESTION 61
Which of the following should an IT privacy practitioner do FIRST following a decision to expand remote working capability to all employees due to a global pandemic?
- A. Evaluate the impact resulting from this change.
- B. Enforce multi-factor authentication for remote access.
- C. Implement a virtual private network (VPN) tool.
- D. Revisit the current remote working policies.
Answer: D
NEW QUESTION 62
What is the BEST way for an organization to maintain the effectiveness of its privacy breach incident response plan?
- A. Conduct annual data privacy tabletop exercises.
- B. Involve the privacy office in an organizational review of the incident response plan.
- C. Require security management to validate data privacy security practices.
- D. Hire a third party to perform a review of data privacy processes.
Answer: C
Explanation:
Because many privacy incidents are also security incidents, the development of a privacy incident response plan should be performed in close cooperation with the security manager to avoid duplication of effort and to utilize existing response plan resources and practices.
NEW QUESTION 63
Which of the following poses the GREATEST privacy risk for client-side application processing?
- A. Failure of a firewall protecting the company network
- B. A remote employee placing communication software on a company server
- C. An employee loading personal information on a company laptop
- D. A distributed denial of service attack (DDoS) on the company network
Answer: B
NEW QUESTION 64
Which of the following system architectures BEST supports anonymity for data transmission?
- A. Plug-in-based
- B. Client-server
- C. Front-end
- D. Peer-to-peer
Answer: B
NEW QUESTION 65
An organization is planning a new implementation for tracking consumer web browser activity. Which of the following should be done FIRST?
- A. Review and update the cookie policy.
- B. Obtain consent from the organization's clients.
- C. Seek approval from regulatory authorities.
- D. Conduct a privacy impact assessment (PIA).
Answer: C
NEW QUESTION 66
When tokenizing credit card data, what security practice should be employed with the original data before it is stored in a data lake?
- A. Backup
- B. Encoding
- C. Encryption
- D. Classification
Answer: C
NEW QUESTION 67
A global financial institution is implementing data masking technology to protect personal data used for testing purposes in non-production environments. Which of the following is the GREATEST challenge in this situation?
- A. Access to personal data is not strictly controlled in development and testing environments.
- B. Data masking tools are complex and difficult to implement.
- C. Complex relationships within and across systems must be retained for testing.
- D. Personal data across the various interconnected systems cannot be easily identified.
Answer: B
NEW QUESTION 68
Which of the following tracking technologies associated with unsolicited targeted advertisements presents the GREATEST privacy risk?
- A. Radio frequency identification (RFID)
- B. Beacon-based tracking
- C. Online behavioral tracking
- D. Website cookies
Answer: D
NEW QUESTION 69
What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?
- A. Cross-border data transfer
- B. Support staff availability and skill set
- C. User notification
- D. Global public interest
Answer: B
NEW QUESTION 70
Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?
- A. Active remote access is monitored.
- B. Access is only granted to authorized users.
- C. Multi-factor authentication is enabled.
- D. Access is logged on the virtual private network (VPN).
Answer: B
NEW QUESTION 71
A new marketing application needs to use data from the organization's customer database. Prior to the application using the data, which of the following should be done FIRST?
- A. De-identify all personal data in the database.
- B. Ensure the data loss prevention (DLP) tool is logging activity.
- C. Renew the encryption key to include the application.
- D. Determine what data is required by the application.
Answer: D
NEW QUESTION 72
An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?
- A. Data mapping
- B. Data normalization
- C. Data tagging
- D. Data hashing
Answer: A
NEW QUESTION 73
......
ISACA Data Privacy Solutions Engineer Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Privacy Architecture (Infrastructure, Applications/Software and Technical Privacy Controls) | - Coordinate and/or perform privacy impact assessment (PIA) and other privacy-focused assessments to identify appropriate tracking technologies, and technical privacy controls. - Participate in the development of privacy control procedures that align with privacy policies and business needs. - Implement procedures related to privacy architecture that align with privacy policies. - Collaborate with cybersecurity personnel on the security risk assessment process to address privacy compliance and risk mitigation - Collaborate with other practitioners to ensure that privacy programs and practices are followed during the design, development, and implementation of systems, applications, and infrastructure. - Evaluate the enterprise architecture and information architecture to ensure it supports privacy by design principles and considerations. - Evaluate advancements in privacy-enhancing technologies and changes in the regulatory landscape. - Identify, validate, and/or implement appropriate privacy and security controls according to data classification procedures. | 36% |
| Privacy Governance (Governance, Management and Risk Management) | -Identify the internal and external privacy requirements specific to the organization's governance and risk management programs and practices. - Participate in the evaluation of privacy policies, programs, and policies for their alignment with legal requirements, regulatory requirements, and/or industry best practices. - Coordinate and/or perform privacy impact assessments (PIA) and other privacy-focused assessments. - Participate in the development of procedures that align with privacy policies and business needs. - Implement procedures that align with privacy policies. - Participate in the management and evaluation of contracts, service levels, and practices of vendors and other external parties. - Participate in the privacy incident management process. - Collaborate with cybersecurity personnel on the security risk assessment process to address privacy compliance and risk mitigation. - Collaborate with other practitioners to ensure that privacy programs and practices are followed during the design, development, and implementation of systems, applications, and infrastructure. - Develop and/or implement a prioritization process for privacy practices. - Develop, monitor, and/or report performance metrics and trends related to privacy practices. - Report on the status and outcomes of privacy programs and practices to relevant stakeholders. - Participate in privacy training and promote awareness of privacy practices. - Identify issues requiring remediation and opportunities for process improvement. | 34% |
| Data Lifecycle (Data Purpose and Data Persistence) | - Identify the internal and external privacy requirements relating to the organization's data lifecycle practices. - Coordinate and/or perform privacy impact assessments (PIA) and other privacy-focused assessments relating to the organization’s data lifecycle practices. - Participate in the development of data lifecycle procedures that align with privacy policies and business needs. - Implement procedures related to data lifecycle that align with privacy policies. - Collaborate with other practitioners to ensure that privacy programs and practices are followed during the design, development, and implementation of systems, applications, and infrastructure. - Evaluate the enterprise architecture and information architecture to ensure it supports privacy by design principles and data lifecycle considerations. - Identify, validate, and/or implement appropriate privacy and security controls according to data classification procedures. - Design, implement, and/or monitor processes and procedures to keep the inventory and dataflow records current. | 30% |
ISACA CDPSE Exam Practice Test Questions: https://www.examsreviews.com/CDPSE-pass4sure-exam-review.html
Updated Certification Exam CDPSE Dumps - Practice Test Questions: https://drive.google.com/open?id=1GBKfFNw4Be2qvUZtmPlr1geFSsTEbXM5