CDPSE Exam Simulation 1 — 100 Questions

Question 1

When configuring AWS Macie to perform data minimization, which configuration is required to prevent the service from scanning internal metadata fields that do not contain customer PII?

Accepted Answer

S3 Exclusion Rules. Exclusion rules in AWS Macie allow users to define paths or patterns to ignore, minimizing the scan footprint.

Answer

S3 Bucket Policy

Answer

Object Tagging

Answer

VPC Endpoint Configuration

Answer

IAM Policy Restriction

Question 2

You are implementing 'Privacy-Preserving Record Linkage' between two databases. What is the most effective approach?

Accepted Answer

Bloom filters. Bloom filters allow comparing data without exchanging the actual raw values, protecting the underlying PII.

Answer

Centralized database merge

Answer

Manual data inspection

Answer

Cleartext matching

Question 3

When configuring a Cloud Service Provider's (CSP) 'Storage Access' permissions, which configuration best supports the principle of data segregation?

Accepted Answer

Service-specific IAM policies. Using separate service accounts and IAM policies for different services ensures that one service cannot access data belonging to another.

Answer

Global administrative access

Answer

Public read-only access

Answer

Wildcard permissions

Question 4

Which THREE factors are critical for balancing privacy and utility when using k-anonymity?

Accepted Answer

Selection of quasi-identifiers. Choosing the right quasi-identifiers, the value of k, and the generalization level are key to balancing privacy and utility.

Answer

The total number of users

Answer

The server CPU count

Question 5

Which TWO actions help improve privacy in a containerized environment (e.g., Kubernetes)?

Accepted Answer

Kubernetes Secrets management. Network policies and secrets management are essential for limiting access and protecting sensitive data in containers.

Answer

Increasing container replica count

Answer

Using public container registries

Answer

Disabling logging

Question 6

During a data minimization project, you use Privacera to filter access to specific columns in a Hive table. Which mechanism is used to enforce this policy?

Accepted Answer

Ranger Policy Engine. Privacera leverages Apache Ranger policies to enforce column-level access control (CLAC) to minimize data exposure.

Answer

SQL Grant Statements

Answer

Column Encryption

Answer

View-Based Restriction

Question 7

Which tool within the SAP Data Intelligence suite is most appropriate for defining the lifecycle of data objects based on their business value?

Accepted Answer

Metadata Explorer. The 'Metadata Explorer' in SAP Data Intelligence allows users to view and categorize data based on lifecycle stages.

Answer

Data Pipeline Designer

Answer

Machine Learning Scenario Manager

Answer

Connection Management

Question 8

You are using AWS Macie to perform a classification scan. Which feature should be configured to notify the privacy team when sensitive data is found?

Accepted Answer

EventBridge Rule. Macie triggers 'EventBridge' alerts that can be routed to notification services like SNS.

Answer

IAM User Permission

Answer

CloudTrail Log

Answer

S3 Policy

Question 9

A privacy engineer is implementing differential privacy on a dataset using Google Cloud's Differential Privacy library. Which THREE configuration steps are critical for minimizing re-identification risk?

Accepted Answer

Defining appropriate sensitivity bounds for the input data. Differential privacy involves setting epsilon, delta, and ensuring proper noise injection.

Answer

Choosing a random seed that is publicly known

Answer

Increasing the dataset size to infinite

Question 10

In Snowflake, what is the effect of using a 'Dynamic Data Masking' policy on a column containing PII when a non-authorized user runs a SELECT query?

Accepted Answer

The data is returned in a masked format. The dynamic masking policy replaces the real data with a redacted version (e.g., NULL or XXX) at query time without altering the underlying storage.

Answer

The entire row is suppressed

Answer

The query fails due to lack of access

Answer

The data is decrypted before display

Question 11

What is the primary function of a 'Data Inventory' in a privacy program?

Accepted Answer

To record the location, purpose, and sensitivity of personal data. A data inventory acts as the master record of what data exists, where it is, and who owns it, serving as the basis for all life cycle activities.

Answer

To automatically encrypt files

Answer

To manage physical server hardware

Answer

To perform user authentication

Question 12

When using Talend Data Fabric for data life cycle management, what is the function of the 'Data Stewardship' component?

Accepted Answer

To allow manual intervention in data processing. It provides a platform for data stewards to manually review and remediate data that failed quality or privacy checks.

Answer

To create data maps

Answer

To automate deletion

Answer

To encrypt data

Question 13

In a data warehouse, which technique is most effective for protecting PII during the ETL (Extract, Transform, Load) process while still allowing analytics?

Accepted Answer

Masking the data during the transformation phase. Data masking during the transformation phase (ETL) allows analytical tools to process the records without seeing the actual PII.

Answer

Using access control lists at the reporting layer

Answer

Deleting the data during extraction

Answer

Encrypting the entire database

Question 14

In the privacy lifecycle, what does the term 'Data Collection' primarily involve?

Accepted Answer

Obtaining and recording personal data from the subject. Data collection is the entry point where PII is gathered from subjects, requiring notice and consent.

Answer

Destroying records

Answer

Backing up data

Answer

Encrypting data in transit

Question 15

You are managing data in a Kubernetes environment. What strategy should be used to support data minimization for ephemeral pods?

Accepted Answer

Use emptyDir for ephemeral storage. Using temporary storage volumes (emptyDir) ensures that data is deleted automatically when the pod is terminated.

Answer

Always use Persistent Volumes

Answer

Enable persistent logging

Answer

Configure snapshots for all pods

Question 16

When establishing a data disposal policy in Informatica Enterprise Data Catalog, what must be configured to ensure the disposal process is auditable?

Accepted Answer

Audit Log Configuration. Audit logs within the Informatica platform ensure that data deletion events are recorded for compliance purposes.

Answer

Retention Period Policy

Answer

Delete Flag in Schema

Answer

Data Lineage Refresh

Question 17

Which THREE factors should be considered when defining a data retention schedule?

Accepted Answer

Regulatory/Legal requirements. Legal requirements, business utility, and statutory limitations are the core drivers of any retention policy.

Answer

The number of concurrent users

Answer

Storage server hardware cost

Question 18

Which TWO options represent common risks when data life cycle management is not implemented?

Accepted Answer

Regulatory non-compliance. Compliance fines and increased data breach impact are major consequences of failed lifecycle management.

Answer

Decreased user account count

Answer

Reduced network throughput

Answer

Loss of software license keys

Question 19

Which TWO metrics are used to measure the effectiveness of data minimization?

Accepted Answer

Reduction in overall data volume. Reduction in total storage and the volume of PII-containing records are standard minimization metrics.

Answer

Database query response time

Answer

Increase in storage capacity

Answer

User satisfaction scores

Question 20

Which of the following is an example of an 'operational' technical control for privacy?

Accepted Answer

Data discovery scanning tools. Automated data discovery scans identify where PII exists, which is necessary for managing privacy.

Answer

Privacy policy document

Answer

Standard Operating Procedure

Answer

Privacy impact assessment