CDPSE

CDPSE practice questions, page 9 of 17, with answer review and explanations.

Question 41

When using anonymization techniques to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

  1. The key must be kept separate and distinct from the data it protects.
  2. The data must be protected by multi-factor authentication.
  3. The key must be a combination of alpha and numeric characters.
  4. The data must be stored in locations protected by data loss prevention (DLP) technology.

Question 42

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

  1. Privacy rights advocate
  2. Outside privacy counsel
  3. Data protection authorities
  4. The organization’s chief privacy officer (CPO)

Question 43

Which of the following BEST enables an IT privacy practitioner to ensure appropriate protection for personal data collected that is required to provide necessary services?

  1. Understanding the data flows within the organization
  2. Implementing strong access controls on a need-to-know basis
  3. Anonymizing privacy data during collection and recording
  4. Encrypting the data throughout its life cycle

Question 44

Which of the following tracking technologies associated with unsolicited targeted advertisements presents the GREATEST privacy risk?

  1. Online behavioral tracking
  2. Radio frequency identification (RFID)
  3. Website cookies
  4. Beacon-based tracking

Question 45

Which of the following should an IT privacy practitioner do FIRST before an organization migrates personal data from an on-premise solution to a cloud-hosted solution?

  1. Develop and communicate a data security plan.
  2. Perform a privacy impact assessment (PIA).
  3. Ensure strong encryption is used.
  4. Conduct a security risk assessment.