CDPSE

CDPSE practice questions, page 7 of 17, with answer review and explanations.

Question 31

Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

  1. The organization lacks a hardware disposal policy.
  2. Emails are not consistently encrypted when sent internally.
  3. Privacy training is carried out by a service provider.
  4. The organization’s privacy policy has not been reviewed in over a year.

Question 32

Within a business continuity plan (BCP), which of the following is the MOST important consideration to ensure the ability to restore availability and access to personal data in the event of a data privacy incident?

  1. Offline backup availability
  2. Recovery time objective (RTO)
  3. Recovery point objective (RPO)
  4. Online backup frequency

Question 33

In which of the following should the data record retention period be defined and established?

  1. Data record model
  2. Data recovery procedures
  3. Data quality standard
  4. Data management plan

Question 34

When tokenizing credit card data, what security practice should be employed with the original data before it is stored in a data lake?

  1. Encoding
  2. Backup
  3. Encryption
  4. Classification

Question 35

Which key stakeholder within an organization should be responsible for approving the outcomes of a privacy impact assessment (PIA)?

  1. Data custodian
  2. Privacy data analyst
  3. Data processor
  4. Data owner