Question 1

A security manager is performing a risk assessment on a data center. The security manager has determined that unauthorized personnel can enter the data center through the loading dock door and shut off utility power to the building. This finding is known as a:

Options :

A : Vulnerability

B : Threat

C : Risk

D : Probability

Answer: B

Question 2

Privacy governance is most concerned with:

Options :

A :

Privacy strategy

B : Security policy

C : Security executive compensation

D : Privacy policy

Answer: A

Question 3

The primary factor related to the selection of a control framework is:

Options :

A :

Current process maturity level

B : Size of the organization

C :

Industry vertical

D :

Compliance level

Answer: C

Question 4

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is the

first step that an online social media vendor should take?

Options :

A :

Wait until there is sufficient case law to see whether the law is enforceable.

B : Wait until the law takes effect to begin making changes to systems.

C : Retain expert privacy counsel to opine on applicability and interpretation.

D : Direct developers to make changes to the system to comply with the new law.

Answer: C

Question 5

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

Options :

A : Encrypt users' information so it is inaccessible to the marketing department.

B : Reference the privacy policy to see if the data is truly restricted.

C : Remove users' information and account from the system.

D : Flag users' email addresses to make sure they do not receive promotional information.

Answer: D

Free CDPSE Mock Exam – Practice Online Confidently

Buying Options: