CDPSE Practice Test 15 — 15 Questions

Question 1

How can an organization ensure privacy is considered during the vendor procurement phase?

Accepted Answer

Including privacy and data security requirements in the RFP.. Including privacy and data security requirements in the Request for Proposal (RFP) ensures that vendors are evaluated on their ability to meet the organization's privacy standards from the outset. This embeds privacy by design into procurement and allows for comparison of vendor capabilities before contract signing.

Answer

Hiring the vendor based solely on price.

Answer

Waiting until the contract is signed before asking for privacy details.

Answer

Allowing the vendor to provide their own privacy policy.

Question 2

When implementing a privacy management system, what is the best approach to gain executive support?

Accepted Answer

Aligning privacy objectives with business value and risk management.. Executive support is most reliably obtained when privacy is framed in the language executives already use: business value, risk reduction, and strategic alignment. Aligning privacy objectives with business value and risk management demonstrates that privacy investment protects revenue, reduces regulatory exposure, and supports customer trust, which resonates with board-level priorities. This framing converts privacy from a perceived cost center into a governance enabler.

Answer

Asking for unlimited funding for software tools.

Answer

Sending a list of all regulatory articles.

Answer

Threatening the board with fines.

Question 3

A web application stores user logs in a cleartext format. To implement 'Privacy by Design', which technical control is the most appropriate first step to minimize data exposure?

Accepted Answer

Apply data masking to the log fields. Data masking replaces or obscures sensitive values in log fields so that even if logs are accessed or leaked, the underlying personal data is not exposed. As a first step under Privacy by Design, it directly minimizes data exposure at the point of storage without requiring architectural changes. It is the most targeted control for cleartext logs.

Answer

Rotate encryption keys weekly

Answer

Implement full-disk encryption

Answer

Enable verbose logging for debugging

Question 4

A privacy engineer is implementing a data subject access request (DSAR) system for a multinational corporation. The system must retrieve all personal data for a given user across a microservices architecture. The engineer proposes using a centralized data lake that ingests all personal data from various services in near real-time. Which concern is most critical from a privacy engineering perspective?

Accepted Answer

The data lake duplicates personal data, increasing the attack surface and potentially violating data minimization principles.. The most critical concern is that the data lake duplicates personal data, increasing the attack surface and violating data minimization. Centralizing personal data from multiple services creates a high-value target and contradicts privacy by design. While availability, performance, and format compatibility are valid, they are secondary to the fundamental privacy risk of unnecessary data duplication and centralization.

Answer

The data lake may become a single point of failure for DSAR processing, affecting availability.

Answer

The data lake may not support all data formats used by the microservices, leading to incomplete DSAR responses.

Answer

The near real-time ingestion may cause performance degradation in the source microservices.

Question 5

Which TWO technical controls are effective for limiting the scope of PII access in a cloud-based SQL environment?

Accepted Answer

Column-level security. Column-level security (A) is correct because it restricts which columns (fields) a given user or role can read, so PII stored in specific columns can be hidden while non-sensitive columns remain accessible, directly limiting the scope of PII exposure. Row-level security (B) is correct because it filters which rows a user can see based on predicates such as tenant ID or region, ensuring users only access the PII records that pertain to them. Together these two controls enforce least-privilege access at the data granularity level in a cloud SQL environment. Public network access (C) is not a limiting control; it broadens exposure by allowing connections from the internet. Full database export (D) increases PII scope by copying the entire dataset out of the database. Verbose error logging (E) is a monitoring/diagnostic measure and can even leak sensitive data in error messages, so it does not limit PII access.

Answer

Public network access

Answer

Full database export

Answer

Verbose error logging

Question 6

Which THREE features are essential when implementing a robust 'Consent Management Platform' (CMP)?

Accepted Answer

Immutable consent audit logs. Option A (Immutable consent audit logs) is correct because a robust CMP must maintain tamper-evident, time-stamped records of every consent grant, change, and withdrawal to demonstrate compliance with regulations such as GDPR Article 7(1) and CCPA, which require the controller to prove consent was obtained. Option D (Granular opt-in toggles) is correct because regulations like GDPR require consent to be specific and informed per processing purpose, so the CMP must let users opt in separately for distinct data uses (e.g., analytics vs. marketing) rather than bundling them into a single blanket acceptance. Option E (Easy consent withdrawal) is correct because GDPR Article 7(3) mandates that withdrawing consent be as simple as giving it, so the CMP must provide an accessible, low-friction mechanism to revoke consent at any time. Option B (Automatic account creation) is not a consent-management function — it is an identity/provisioning feature and could even conflict with data-minimization principles. Option C (Automated data deletion) is a data-lifecycle/retention capability, not an essential CMP feature, since the CMP's core role is capturing and enforcing consent state rather than executing deletion workflows.

Answer

Automatic account creation

Answer

Automated data deletion

Question 7

Which TWO of the following are key privacy engineering objectives when designing a system that processes sensitive health data?

Accepted Answer

Data minimization. Data minimization (A) is a core privacy engineering objective because it limits collection and retention of sensitive health data to what is strictly necessary for the specified purpose, reducing exposure and regulatory risk under frameworks like GDPR and HIPAA. Transparency of processing (D) is equally fundamental, since data subjects must be informed about what health data is collected, why, how it is used, and with whom it is shared, enabling informed consent and accountability. Hardware cost reduction (B) is an economic/financial goal, not a privacy objective, and does not address how personal data is protected. Maximum system availability (C) is an availability/security concern that, while important, is not itself a privacy engineering objective and can even conflict with privacy if it encourages excessive data retention. High performance throughput (E) is a performance engineering goal unrelated to protecting the privacy of health data.

Answer

Hardware cost reduction

Answer

Maximum system availability

Answer

High performance throughput

Question 8

Which TWO methods are effective for preventing 'Inference Attacks' in a data analytics platform?

Accepted Answer

Query throttling/auditing. Query throttling and auditing (A) is correct because inference attacks rely on repeatedly issuing many overlapping or narrowly scoped queries and correlating the results; rate-limiting, capping query volume, and logging/alerting on suspicious query patterns reduce the attacker's ability to aggregate enough outputs to deduce sensitive facts. Differential privacy (C) is correct because it adds calibrated statistical noise to query results so that any single individual's data has a bounded influence on the output, mathematically limiting what can be inferred about specific records even across many queries. The remaining options are not preventive controls: disabling all encryption (B) weakens confidentiality and makes inference/exfiltration easier, full public data access (D) directly exposes the data and enables inference, and raw data export (E) hands over the underlying records, which is the opposite of preventing inference.

Answer

Disabling all encryption

Answer

Full public data access

Answer

Raw data export

Question 9

A privacy manager is drafting the charter for a new privacy program. The organization operates in multiple countries and wants to ensure the program has clear authority and accountability. Which of the following should be the PRIMARY element to establish in the charter to enable effective governance?

Accepted Answer

A statement of the privacy program's mandate, scope, and reporting lines to executive leadership. A privacy program charter must establish the program's mandate, scope, and reporting lines to executive leadership. This creates the authority and accountability necessary for the program to function effectively across multiple jurisdictions. Other elements like data inventories, training, and audits are important but are operational or assurance activities that depend on a strong governance foundation.

Answer

A schedule for periodic privacy audits and assessments

Answer

A comprehensive training plan for all employees on privacy principles

Answer

A detailed list of all personal data processing activities across the organization

Question 10

A privacy engineer is implementing 'Tokenization' for credit card processing. Where should the 'vault' be situated to ensure the highest level of privacy?

Accepted Answer

In a physically or logically segregated environment. Tokenization replaces sensitive data with non-sensitive tokens, and the mapping between tokens and original values is held in a token vault. To maximize privacy, the vault must be isolated in a physically or logically segregated environment so that compromise of the application, web server, or logs does not expose the token-to-data mapping. Segregation enforces defense in depth and limits blast radius if any front-end component is breached.

Answer

In the same database as the application logs

Answer

On the end-user's local workstation

Answer

Integrated directly into the web server memory

Question 11

Which TWO technical methods ensure data integrity during the life cycle?

Accepted Answer

Checksums. Checksums (A) are correct because they compute a fixed-size hash value from data blocks, allowing any accidental alteration during storage, transmission, or processing to be detected by recomputing and comparing the checksum, which directly preserves integrity across the data life cycle. Digital signatures (E) are correct because they use asymmetric cryptography to create a cryptographic binding between the data and the signer's private key, so any modification invalidates the signature and provides both integrity verification and authenticity. Load balancing (B) only distributes traffic across servers for availability and performance, not integrity. Data compression (C) reduces data size for storage or bandwidth efficiency and does not detect or prevent corruption. Data deduplication (D) eliminates redundant copies to save space and can even introduce integrity risks if not carefully managed, so it does not ensure integrity.

Answer

Load balancing

Answer

Data compression

Answer

Data deduplication

Question 12

In the context of the data lifecycle, what is the primary benefit of using a 'Data Catalog' tool like Alation?

Accepted Answer

To provide centralized visibility of data location and use. A Data Catalog such as Alation provides a centralized inventory and metadata repository that shows where data resides, how it flows, who owns it, and how it is used across the enterprise. This centralized visibility is foundational to data lifecycle management because you cannot govern, classify, or dispose of data you cannot locate. It supports privacy programs by enabling discovery, lineage tracking, and impact analysis for subject access requests.

Answer

To provide physical security

Answer

To perform automated data deletion

Answer

To encrypt sensitive files

Question 13

Your organization is preparing for a CCPA/CPRA audit. You are asked to verify the 'Right to Opt-Out of Sale or Sharing' implementation. Which technical requirement must be validated to ensure compliance with the Global Privacy Control (GPC) signal?

Accepted Answer

The server must programmatically honor the GPC signal as a valid opt-out request without requiring user interaction.. Under CCPA/CPRA, the Global Privacy Control signal is a legally recognized opt-out mechanism, and the server must treat it as a valid, binding opt-out request without requiring the user to click a banner or authenticate. Compliance requires programmatic detection of the GPC header/signal and automatic suppression of the sale or sharing of personal information for that user. This is the technical requirement auditors validate when testing the Right to Opt-Out of Sale or Sharing.

Answer

The system must log the user's IP address to verify their residency status before honoring the signal.

Answer

The website must automatically trigger a manual consent banner upon detecting the signal.

Answer

The user must be authenticated via OAuth2 to confirm their identity before the signal is processed.

Question 14

When using Varonis to identify 'stale' data for minimization, what criteria must be defined to avoid false positives?

Accepted Answer

Last Accessed Date. Varonis identifies stale data by tracking the Last Accessed Date (or last modified date, depending on configuration) of files and folders. To avoid false positives, the criteria must be defined around a meaningful inactivity threshold (e.g., no access in 90, 180, or 365 days) and must account for system accounts, backup processes, and antivirus scans that touch files without human interaction. Last Accessed Date is the core signal Varonis uses to flag data for minimization or archival.

Answer

File size threshold

Answer

File extension

Answer

User account status

Question 15

A CDPSE is reviewing a vendor's privacy controls. Which finding would be considered a major non-compliance risk?

Accepted Answer

The vendor lacks a documented process for handling data subject erasure requests.. A vendor lacking a documented process for handling data subject erasure requests is a major non-compliance risk because it directly violates GDPR/CCPA obligations to honor erasure rights. Without a documented process, the vendor cannot reliably fulfill DSRs, exposing the organization to regulatory penalties and reputational damage.

Answer

The vendor uses a different database encryption algorithm than the organization.

Answer

The vendor's privacy policy is not written in the user's native language.

Answer

The vendor only updates their privacy policy once every two years.