CDPSE

CDPSE practice questions, page 11 of 17, with answer review and explanations.

Question 51

Which of the following techniques mitigates design flaws in the application development process that may contribute to potential leakage of personal data?

  1. User acceptance testing (UAT)
  2. Patch management
  3. Software hardening
  4. Web application firewall (WAF)

Question 52

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

  1. It eliminates cryptographic key collision.
  2. It minimizes the risk if the cryptographic key is compromised.
  3. It is more practical and efficient to use a single cryptographic key.
  4. Each process can only be supported by its own unique key management process.

Question 53

During which of the following system lifecycle stages is it BEST to conduct a privacy impact assessment (PIA) on a system that holds personal data?

  1. Functional testing
  2. Development
  3. Production
  4. User acceptance testing (UAT)

Question 54

Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

  1. To assess privacy risks
  2. To evaluate effectiveness of data controls
  3. To determine data integration gaps
  4. To comply with regulations

Question 55

Which of the following is the BEST method to ensure the security of encryption keys when transferring data containing personal information between cloud applications?

  1. Whole disk encryption
  2. Asymmetric encryption
  3. Digital signature
  4. Symmetric encryption