Question 1

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Options :

A : Data redaction

B : Data quality assurance (QA)

C : Irreversible disposal

D : Collection limitation

Answer: D

Question 2

An organization relying on physical access controls has migrated its on-premises applications to cloud service providers. What

compensating control should be enacted for access to cloud-based applications since physical access is less of a factor?

Options :

A : Multifactor authentication

B : Single sign-on

C :

Reduced sign-on

D :

Biometrics

Answer: A

Question 3

A privacy strategist has examined a business process and has determined that personnel who perform the process do so consistently, but

there is no written process document. The maturity level of this process is:

Options :

A : Initial

B : Managed

C : Repeatable

D : Defined

Answer: C

Question 4

Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

Options :

A : The organization lacks a hardware disposal policy.

B : Emails are not consistently encrypted when sent internally.

C : Privacy training is carried out by a service provider.

D : The organization-s privacy policy has not been reviewed in over a year.

Answer: D

Question 5

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is the

first step that an online social media vendor should take?

Options :

A :

Wait until there is sufficient case law to see whether the law is enforceable.

B : Wait until the law takes effect to begin making changes to systems.

C : Retain expert privacy counsel to opine on applicability and interpretation.

D : Direct developers to make changes to the system to comply with the new law.

Answer: C

Free CDPSE Mock Exam – Practice Online Confidently