Latest ISACA CDPSE Actual Free Exam Questions & Community Discussion, Page 1

Question #1

Which of the following is the MOST important attribute of a privacy policy?

A. Transparency

B. Breach notification period

C. Data retention period

D. Language localization

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

Which of the following is the MOST effective remote access model for reducing the likelihood of attacks originating from connecting devices?

A. Site-to-site virtual private network (VPN)

B. Thick client desktop with virtual private network (VPN) connection

C. Thin Client remote desktop protocol (RDP)

D. Remote wide area network (WAN) links

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #3

Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?

A. The value proposition of a PIA is not understood by management.

B. Conducting a PIA requires significant funding and resources.

C. PIAs need to be performed many times in a year.

D. The organization lacks knowledge of PIA methodology.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #4

An organization wants to ensure that endpoints are protected in line with the privacy policy. Which of the following should be the FIRST consideration?

A. Hardening the operating systems of endpoint devices

B. Implementing network traffic filtering on endpoint devices

C. Managing remote access and control

D. Detecting malicious access through endpoints

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

How can an organization BEST ensure its vendors are complying with data privacy requirements defined in their contracts?

A. Review self-attestations of compliance provided by vendor management.

B. Perform penetration tests of the vendors' data security.

C. Obtain independent assessments of the vendors' data management processes.

D. Compare contract requirements against vendor deliverables.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

When using pseudonymization to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

A. The data must be protected by multi-factor authentication.

B. The identifier must be kept separate and distinct from the data it protects.

C. The data must be stored in locations protected by data loss prevention (DLP) technology.

D. The key must be a combination of alpha and numeric characters.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

A project manager for a new data collection system had a privacy impact assessment (PIA) completed before the solution was designed. Once the system was released into production, an audit revealed personal data was being collected that was not part of the PIA What is the BEST way to avoid this situation in the future?

A. Incorporate privacy checkpoints into the secure development life cycle

B. Document personal data workflows in the product life cycle

C. Conduct a privacy post-implementation review.

D. Require management approval of changes to system architecture design.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #8

Which of the following is the BEST way to reduce the risk of compromise when transferring personal information using email?

A. Password-protected .zip files

B. Centrally managed encryption

C. End user-managed encryption

D. Private cloud storage space

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #9

Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

A. Aggregate the data immediately upon collection.

B. Use a third party to collect, store, and process the data.

C. Collect data through a secure organizational web server.

D. Collect only the data necessary to meet objectives.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

Which of the following hard drive sanitation methods provides an organization with the GREATEST level of assurance that data has been permanently erased?

A. Factory resetting the drive

B. Crypto-shredding the drive

C. Degaussing the drive

D. Reformatting the drive

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #11

Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase?

A. Multi-factor authentication

B. Possession factor authentication

C. Knowledge-based credential authentication

D. Biometric authentication

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #12

What is the BES T way for an organization to maintain the effectiveness of its privacy breach incident response plan?

A. Hire a third party to perform a review of data privacy processes.

B. Involve the privacy office in an organizational review of the incident response plan.

C. Require security management to validate data privacy security practices.

D. Conduct annual data privacy tabletop exercises

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #13

A new marketing application needs to use data from the organization's customer database. Prior to the application using the data, which of the following should be done FIRST?

A. Renew the encryption key to include the application.

B. De-identify all personal data in the database.

C. Determine what data is required by the application.

D. Ensure the data loss prevention (DLP) tool is logging activity.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #14

Which of the following is a responsibility of the audit function in helping an organization address privacy compliance requirements?

A. Managing privacy notices provided to customers

B. Validating the privacy framework

C. Approving privacy impact assessments (PIAs)

D. Establishing employee privacy rights and consent

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

ISACA CDPSE Actual Free Exam Questions & Community Discussion

Download Free ISACA CDPSE Demo