New 2023 Realistic Free ISACA CDPSE Exam Dump Questions and Answer
CDPSE Practice Test Engine: Try These 122 Exam Questions
NEW QUESTION 48
Which of the following is a responsibility of the audit function in helping an organization address privacy compliance requirements?
- A. Validating the privacy framework
- B. Managing privacy notices provided to customers
- C. Approving privacy impact assessments (PIAs)
- D. Establishing employee privacy rights and consent
Answer: D
NEW QUESTION 49
Which of the following should be done FIRST when developing an organization-wide strategy to address data privacy risk?
- A. Create a comprehensive data inventory.
- B. Develop a data privacy policy.
- C. Obtain executive support.
- D. Gather privacy requirements from legal counsel.
Answer: A
NEW QUESTION 50
An organization's data destruction guidelines should require hard drives containing personal data to go through which of the following processes prior to being crushed?
- A. Degaussing
- B. Remote partitioning
- C. Hammer strike
- D. Low-level formatting
Answer: D
NEW QUESTION 51
Which of the following should an IT privacy practitioner do FIRST before an organization migrates personal data from an on-premise solution to a cloud-hosted solution?
- A. Perform a privacy impact assessment (PIA).
- B. Ensure strong encryption is used.
- C. Develop and communicate a data security plan.
- D. Conduct a security risk assessment.
Answer: D
NEW QUESTION 52
Within a business continuity plan (BCP), which of the following is the MOST important consideration to ensure the ability to restore availability and access to personal data in the event of a data privacy incident?
- A. Recovery time objective (RTO)
- B. Recovery point objective (RPO)
- C. Offline backup availability
- D. Online backup frequency
Answer: B
NEW QUESTION 53
Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?
- A. Privacy impact assessment (PIA)
- B. Data classification
- C. User acceptance testing (UAT)
- D. Automatic dynamic code scan
Answer: A
NEW QUESTION 54
Which of the following would MOST effectively reduce the impact of a successful breach through a remote access solution?
- A. Monitoring and reviewing remote access logs
- B. Regular testing of system backups
- C. Regular physical and remote testing of the incident response plan
- D. Compartmentalizing resource access
Answer: C
NEW QUESTION 55
Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?
- A. For the purpose of medical research
- B. A forthcoming campaign to win back customers
- C. A required retention period due to regulations
- D. Ease of onboarding when the customer returns
Answer: C
NEW QUESTION 56
Which of the following is the BEST way for an organization to limit potential data exposure when implementing a new application?
- A. Encrypt all data used by the application.
- B. Implement a data loss prevention (DLP) system.
- C. Capture the application's authentication logs.
- D. Use only the data required by the application.
Answer: B
NEW QUESTION 57
An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?
- A. Data integrity and confidentiality
- B. Lawfulness and fairness
- C. Data use limitation
- D. System use requirements
Answer: A
NEW QUESTION 58
Which of the following is MOST important to establish within a data storage policy to protect data privacy?
- A. Data quality assurance (QA)
- B. Data redaction
- C. Collection limitation
- D. Irreversible disposal
Answer: C
NEW QUESTION 59
When tokenizing credit card data, what security practice should be employed with the original data before it is stored in a data lake?
- A. Encryption
- B. Backup
- C. Classification
- D. Encoding
Answer: A
NEW QUESTION 60
When evaluating cloud-based services for backup, which of the following is MOST important to consider from a privacy regulation standpoint?
- A. Data residing in another country
- B. Volume of data stored
- C. Data classification labeling
- D. Privacy training for backup users
Answer: C
NEW QUESTION 61
Which of the following BEST represents privacy threat modeling methodology?
- A. Replicating privacy scenarios that reflect representative software usage
- B. Reliably estimating a threat actor's ability to exploit privacy vulnerabilities
- C. Systematically eliciting and mitigating privacy threats in a software architecture
- D. Mitigating inherent risks and threats associated with privacy control weaknesses
Answer: D
NEW QUESTION 62
Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?
- A. Umbrella consent for multiple applications by the same developer
- B. User consent to share personal data
- C. Unlimited retention of personal data by third parties
- D. The user's ability to select, filter, and transform data before it is shared
Answer: B
NEW QUESTION 63
Of the following, who should be PRIMARILY accountable for creating an organization's privacy management strategy?
- A. Information security steering committee
- B. Chief data officer (CDO)
- C. Privacy steering committee
- D. Chief privacy officer (CPO)
Answer: D
Explanation:
Some organizations, typically those that manage large amounts of personal information related to employees, customers, or constituents, will employ a chief privacy officer (CPO). Some organizations have a CPO because applicable regulations such as the Gramm-Leach-Bliley Act (GLBA) require it. Other regulations such as the Health Information Portability and Accountability Act (HIPAA), the Fair Credit Reporting Act (FCRA), and the GLBA place a slate of responsibilities upon an organization that compels them to hire an executive responsible for overseeing compliance.
NEW QUESTION 64
Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?
- A. Access is only granted to authorized users.
- B. Active remote access is monitored.
- C. Multi-factor authentication is enabled.
- D. Access is logged on the virtual private network (VPN).
Answer: A
NEW QUESTION 65
Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?
- A. Improved data integrity and reduced effort for privacy audits
- B. Unlimited functionalities and highly secured applications
- C. Monitored network activities for unauthorized use
- D. Limited functions and capabilities of a secured operating environment
Answer: C
NEW QUESTION 66
Which of the following helps define data retention time is a stream-fed data lake that includes personal data?
- A. Privacy impact assessments (PIAs)
- B. Data lake configuration
- C. Data privacy standards
- D. Information security assessments
Answer: A
NEW QUESTION 67
Which of the following is MOST important when developing an organizational data privacy program?
- A. Obtaining approval from process owners
- B. Following an established privacy framework
- C. Performing an inventory of all data
- D. Profiling current data use
Answer: C
NEW QUESTION 68
Which of the following poses the GREATEST privacy risk for client-side application processing?
- A. A distributed denial of service attack (DDoS) on the company network
- B. Failure of a firewall protecting the company network
- C. An employee loading personal information on a company laptop
- D. A remote employee placing communication software on a company server
Answer: D
NEW QUESTION 69
Which of the following is the BEST method to ensure the security of encryption keys when transferring data containing personal information between cloud applications?
- A. Digital signature
- B. Asymmetric encryption
- C. Symmetric encryption
- D. Whole disk encryption
Answer: C
NEW QUESTION 70
An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is the BEST choice to mitigate this risk?
- A. Email filtering system
- B. Mobile device management (MDM)
- C. Intrusion monitoring
- D. User behavior analytics
Answer: C
NEW QUESTION 71
......
Guaranteed Success in Isaca Certification CDPSE Exam Dumps: https://www.troytecdumps.com/CDPSE-troytec-exam-dumps.html
ISACA CDPSE Daily Practice Exam New 2023 Updated 122 Questions: https://drive.google.com/open?id=1BSDegu5MfIJNhinXg2FRuGIQnhVS2wL4