Question 1

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Options :

A : Data redaction

B : Data quality assurance (QA)

C : Irreversible disposal

D : Collection limitation

Answer: D

Question 2

The primary factor related to the selection of a control framework is:

Options :

A :

Current process maturity level

B : Size of the organization

C :

Industry vertical

D :

Compliance level

Answer: C

Question 3

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is the

first step that an online social media vendor should take?

Options :

A :

Wait until there is sufficient case law to see whether the law is enforceable.

B : Wait until the law takes effect to begin making changes to systems.

C : Retain expert privacy counsel to opine on applicability and interpretation.

D : Direct developers to make changes to the system to comply with the new law.

Answer: C

Question 4

A privacy manager is attending a planning meeting in which marketing personnel argue for the collection of PII from customers that

may be used sometime in the future. How should the privacy manager respond?

Options :

A : Permit the collection of the additional PII fields.

B : Require that the additional PII fields be encrypted.

C : Update the data retention schedule to include the additional PII fields.

D : Forbid the collection of the additional PII fields.

Answer: D

Question 5

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Options :

A : Privacy rights advocate

B : Outside privacy counsel

C : Data protection authorities

D : The organization-s chief privacy officer (CPO)

Answer: C

Free CDPSE Mock Exam – Practice Online Confidently