QUESTION 21
An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is the BEST choice to mitigate this risk?

QUESTION 22
Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization’s privacy notice. Which of the following is the BEST way to address this concern?

QUESTION 23
Which of the following is MOST important to establish within a data storage policy to protect data privacy?

QUESTION 24
An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

QUESTION 25
A global organization is planning to implement a customer relationship management (CRM) system to be used in offices based in multiple countries. Which of the following is the MOST important data protection consideration for this project?

QUESTION 26
What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

QUESTION 27
An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

QUESTION 28
Which of the following is MOST important when developing an organizational data privacy program?

QUESTION 29
An organization’s data destruction guidelines should require hard drives containing personal data to go through which of the following processes prior to being crushed?

QUESTION 30
Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

QUESTION 31
Which of the following is MOST likely to present a valid use case for keeping a customer’s personal data after contract termination?

QUESTION 32
A migration of personal data involving a data source with outdated documentation has been approved by senior management. Which of the following should be done NEXT?

QUESTION 33
Which of the following is the MOST important consideration when using advanced data sanitization methods to ensure privacy data will be unrecoverable?

QUESTION 34
Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?

QUESTION 35
Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

QUESTION 36
Which of the following would MOST effectively reduce the impact of a successful breach through a remote access solution?

QUESTION 37
When a government’s health division established the complete privacy regulation for only the health market, which privacy protection reference model is being used?

QUESTION 38
What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?

QUESTION 39
Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase?