Prepare Top ISACA CDPSE Exam Study Guide Practice Questions Edition [Q21-Q39]

4/5 - (1 vote)

Prepare Top ISACA CDPSE Exam Study Guide Practice Questions Edition

Go to CDPSE Questions – Try CDPSE dumps pdf

QUESTION 21
An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is the BEST choice to mitigate this risk?

Email filtering system

Intrusion monitoring

Mobile device management (MDM)

User behavior analytics

QUESTION 22
Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization’s privacy notice. Which of the following is the BEST way to address this concern?

Review the privacy policy.

Obtain independent assurance of current practices.

Re-assess the information security requirements.

Validate contract compliance.

QUESTION 23
Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Data redaction

Data quality assurance (QA)

Irreversible disposal

Collection limitation

QUESTION 24
An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

Data tagging

Data normalization

Data mapping

Data hashing

QUESTION 25
A global organization is planning to implement a customer relationship management (CRM) system to be used in offices based in multiple countries. Which of the following is the MOST important data protection consideration for this project?

Industry best practice related to information security standards in each relevant jurisdiction

Identity and access management mechanisms to restrict access based on need to know

Encryption algorithms for securing customer personal data at rest and in transit

National data privacy legislative and regulatory requirements in each relevant jurisdiction

QUESTION 26
What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

Distributing a privacy rights policy

Mailing rights documentation to customers

Publishing a privacy notice

Gaining consent when information is collected

QUESTION 27
An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

Data integrity and confidentiality

System use requirements

Data use limitation

Lawfulness and fairness

QUESTION 28
Which of the following is MOST important when developing an organizational data privacy program?

Obtaining approval from process owners

Profiling current data use

Following an established privacy framework

Performing an inventory of all data

QUESTION 29
An organization’s data destruction guidelines should require hard drives containing personal data to go through which of the following processes prior to being crushed?

Low-level formatting

Remote partitioning

Degaussing

Hammer strike

QUESTION 30
Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

Web application firewall (WAF)

Website URL blacklisting

Domain name system (DNS) sinkhole

Desktop antivirus software

QUESTION 31
Which of the following is MOST likely to present a valid use case for keeping a customer’s personal data after contract termination?

For the purpose of medical research

A forthcoming campaign to win back customers

A required retention period due to regulations

Ease of onboarding when the customer returns

QUESTION 32
A migration of personal data involving a data source with outdated documentation has been approved by senior management. Which of the following should be done NEXT?

Review data flow post migration.

Ensure appropriate data classification.

Engage an external auditor to review the source data.

Check the documentation version history for anomalies.

QUESTION 33
Which of the following is the MOST important consideration when using advanced data sanitization methods to ensure privacy data will be unrecoverable?

Subject matter expertise

Type of media

Regulatory compliance requirements

Location of data

QUESTION 34
Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?

Access is logged on the virtual private network (VPN).

Multi-factor authentication is enabled.

Active remote access is monitored.

Access is only granted to authorized users.

QUESTION 35
Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

It eliminates cryptographic key collision.

It minimizes the risk if the cryptographic key is compromised.

It is more practical and efficient to use a single cryptographic key.

Each process can only be supported by its own unique key management process.

QUESTION 36
Which of the following would MOST effectively reduce the impact of a successful breach through a remote access solution?

Compartmentalizing resource access

Regular testing of system backups

Monitoring and reviewing remote access logs

Regular physical and remote testing of the incident response plan

QUESTION 37
When a government’s health division established the complete privacy regulation for only the health market, which privacy protection reference model is being used?

Comprehensive

Sectoral

Self-regulatory

Co-regulatory

QUESTION 38
What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?

Cross-border data transfer

Support staff availability and skill set

User notification

Global public interest

QUESTION 39
Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase?

Possession factor authentication

Knowledge-based credential authentication

Multi-factor authentication

Biometric authentication

Loading …