CDPSE

CDPSE practice questions, page 4 of 17, with answer review and explanations.

Question 16

Which of the following is the BEST way to protect personal data in the custody of a third party?

  1. Have corporate counsel monitor privacy compliance.
  2. Require the third party to provide periodic documentation of its privacy management program.
  3. Include requirements to comply with the organization’s privacy policies in the contract.
  4. Add privacy-related controls to the vendor audit plan.

Question 17

Which of the following is MOST important to ensure when developing a business case for the procurement of a new IT system that will process and store personal information?

  1. The system architecture is clearly defined.
  2. A risk assessment has been completed.
  3. Security controls are clearly defined.
  4. Data protection requirements are included.

Question 18

Which of the following is the BEST way to validate that privacy practices align to the published enterprise privacy management program?

  1. Conduct an audit.
  2. Report performance metrics.
  3. Perform a control self-assessment (CSA).
  4. Conduct a benchmarking analysis.

Question 19

Which of the following is the GREATEST benefit of adopting data minimization practices?

  1. Storage and encryption costs are reduced.
  2. Data retention efficiency is enhanced.
  3. The associated threat surface is reduced.
  4. Compliance requirements are met.

Question 20

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

  1. Data tagging
  2. Data normalization
  3. Data mapping
  4. Data hashing