CDPSE

CDPSE practice questions, page 5 of 17, with answer review and explanations.

Question 21

Which of the following vulnerabilities is MOST effectively mitigated by enforcing multi-factor authentication to obtain access to personal information?

  1. End users using weak passwords
  2. Organizations using weak encryption to transmit data
  3. Vulnerabilities existing in authentication pages
  4. End users forgetting their passwords

Question 22

Which of the following is the BEST way for an organization to limit potential data exposure when implementing a new application?

  1. Implement a data loss prevention (DLP) system.
  2. Use only the data required by the application.
  3. Encrypt all data used by the application.
  4. Capture the application’s authentication logs.

Question 23

An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

  1. Data integrity and confidentiality
  2. System use requirements
  3. Data use limitation
  4. Lawfulness and fairness

Question 24

What type of personal information can be collected by a mobile application without consent?

  1. Full name
  2. Geolocation
  3. Phone number
  4. Accelerometer data

Question 25

What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

  1. Distributing a privacy rights policy
  2. Mailing rights documentation to customers
  3. Publishing a privacy notice
  4. Gaining consent when information is collected