Question 1

An organization will be introducing smart TVs and other connected devices into the enterprise network. Which of the following security controls will most effectively protect the enterprise?

Options :

A : Data loss prevention

B : Network segmentation

C : Annual penetration testing

D : Adding smart devices to configuration management systems

Answer: B

Question 2

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Options :

A : For the purpose of medical research

B : A forthcoming campaign to win back customers

C : A required retention period due to regulations

D : Ease of onboarding when the customer returns

Answer: C

Question 3

A privacy manager is attending a planning meeting in which marketing personnel argue for the collection of PII from customers that

may be used sometime in the future. How should the privacy manager respond?

Options :

A : Permit the collection of the additional PII fields.

B : Require that the additional PII fields be encrypted.

C : Update the data retention schedule to include the additional PII fields.

D : Forbid the collection of the additional PII fields.

Answer: D

Question 4

A security manager is performing a risk assessment on a data center. The security manager has determined that unauthorized personnel can enter the data center through the loading dock door and shut off utility power to the building. This finding is known as a:

Options :

A : Vulnerability

B : Threat

C : Risk

D : Probability

Answer: B

Question 5

Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?

Options :

A : Perform a privacy risk audit.

B : Conduct a privacy risk assessment.

C : Validate a privacy risk attestation.

D : Conduct a privacy risk remediation exercise.

Answer: A

Free CDPSE Mock Exam – Practice Online Confidently

Buying Options: