Question 1

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

Options :

A : Data tagging

B : Data normalization

C : Data mapping

D : Data hashing

Answer: C

Question 2

Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

Options :

A : The organization lacks a hardware disposal policy.

B : Emails are not consistently encrypted when sent internally.

C : Privacy training is carried out by a service provider.

D : The organization-s privacy policy has not been reviewed in over a year.

Answer: D

Question 3

When configuring information systems for the communication and transport of personal data, an organization should:

Options :

A : adopt the default vendor specifications.

B : review configuration settings for compliance.

C : implement the least restrictive mode.

D : enable essential capabilities only.

Answer: B

Question 4

A privacy manager is attending a planning meeting in which marketing personnel argue for the collection of PII from customers that

may be used sometime in the future. How should the privacy manager respond?

Options :

A : Permit the collection of the additional PII fields.

B : Require that the additional PII fields be encrypted.

C : Update the data retention schedule to include the additional PII fields.

D : Forbid the collection of the additional PII fields.

Answer: D

Question 5

What are the categories of risk treatment?

Options :

A : Risk avoidance, risk transfer, risk mitigation, and risk acceptance

B : Risk avoidance, risk treatment, risk mitigation, and risk acceptance

C : Risk avoidance, risk reduction, risk transfer, risk mitigation, and risk acceptance

D : Risk avoidance, risk transfer, and risk mitigation

Answer: B

Higher Test Marks with Free Online CDPSE Exam Practice

Buying Options: