CDPSE Practice Test 20 — 15 Questions

Question 1

When establishing a data disposal policy in Informatica Enterprise Data Catalog, what must be configured to ensure the disposal process is auditable?

Accepted Answer

Audit Log Configuration. To ensure the data disposal process is auditable in Informatica Enterprise Data Catalog, Audit Log Configuration must be enabled and properly set up. This captures detailed logs of user actions, including data disposal operations, providing a tamper-evident trail that can be reviewed for compliance. Without audit logging, there is no reliable record of who disposed of what data and when, making the process unverifiable.

Answer

Retention Period Policy

Answer

Delete Flag in Schema

Answer

Data Lineage Refresh

Question 2

A privacy engineer is implementing a consent management platform (CMP) for a website that uses cookies and similar tracking technologies. The CMP must comply with GDPR and ePrivacy Directive. Which TWO features are essential for the CMP to ensure valid consent? (Choose two.)

Accepted Answer

The CMP must record and store a timestamped proof of consent for each user.. The essential features are the ability for users to withdraw consent as easily as they gave it, and the recording of timestamped proof of consent. These ensure ongoing user control and accountability, both required by GDPR. Blocking all cookies is too broad, pre-checked boxes are invalid, and a single 'accept all' without granularity fails the specificity requirement.

Answer

The CMP must allow users to consent to all cookies with a single click, without granular options.

Answer

The CMP must use pre-checked boxes for non-essential cookies to improve user experience.

Answer

The CMP must block all cookies until the user provides explicit consent for each category.

Question 3

Which TWO methods are commonly used to achieve data minimization in a legacy database?

Accepted Answer

Anonymization of records. Data minimization means limiting stored personal data to what is strictly necessary, and anonymization of records (C) supports this by irreversibly removing or altering identifying fields so the data no longer relates to an identifiable individual, reducing the scope of protected data held. Purging of obsolete data (D) directly enforces minimization by deleting records that are no longer needed for the stated purpose, using operations such as DELETE or DROP on aged rows/tables per a retention schedule. Mirroring (A) merely duplicates the full dataset to another server for availability or failover, which increases rather than reduces the data footprint. Multi-factor authentication (B) is an access-control safeguard, not a data-reduction technique, and increasing indexing (E) only improves query performance while leaving the volume of stored data unchanged.

Answer

Mirroring the database

Answer

Implementing multi-factor authentication

Answer

Increasing database indexing

Question 4

Which THREE factors are critical for balancing privacy and utility when using k-anonymity?

Accepted Answer

Selection of quasi-identifiers. Option A is correct because k-anonymity only works when you first identify the quasi-identifiers (e.g., ZIP code, age, gender) that could be joined with external data to re-identify individuals; choosing them correctly determines what must be protected. Option B is correct because the k-value sets the minimum group size each record must share, directly trading off privacy (higher k) against data utility (lower k). Option D is correct because the generalization level (and suppression) determines how much detail is blurred in quasi-identifiers, which controls the privacy-utility balance. Option C is not a design factor for balancing privacy and utility; total user count affects feasibility but is not a tuning knob. Option E is irrelevant because server CPU count is a performance resource, not a privacy-utility parameter.

Answer

The total number of users

Answer

The server CPU count

Question 5

A privacy engineer is selecting a cloud service provider (CSP) for storing sensitive personal data. The organization requires that data be encrypted at rest and that the organization retain control over encryption keys. Which CSP feature best meets this requirement?

Accepted Answer

Customer-managed encryption keys (CMEK). Customer-managed encryption keys (CMEK) allow the organization to control the encryption keys used for data at rest while benefiting from the CSP's managed infrastructure. This meets the requirement for key control without the operational burden of full client-side encryption. Provider-managed keys do not offer sufficient control, and on-premises key storage may not integrate well with cloud services. HSM as a service is a component that can support CMEK but is not the specific feature itself.

Answer

Client-side encryption with keys stored on-premises

Answer

Provider-managed encryption keys

Answer

Hardware security module (HSM) as a service

Question 6

A healthcare organization is establishing a privacy governance program. The Chief Privacy Officer is defining the roles and responsibilities of the privacy office. Which TWO of the following are core responsibilities of the privacy office? (Choose two.)

Accepted Answer

Conducting privacy training and awareness programs. The privacy office is fundamentally responsible for developing policies and standards and for delivering training and awareness. These functions establish the governance framework and equip employees to comply. Managing IT infrastructure, budgeting, and contract negotiation are outside the privacy office's core scope, although collaboration with those functions is important.

Answer

Negotiating contracts with third-party processors

Answer

Managing the organization's IT security infrastructure

Answer

Approving the annual marketing budget

Question 7

Which component in an API gateway is used to ensure PII is not sent to third-party endpoints?

Accepted Answer

Request transformation policy. A request transformation policy in an API gateway rewrites or strips fields in the outbound request payload before it is forwarded to a third-party endpoint, which is exactly the mechanism used to prevent PII from leaving the trust boundary. Because the gateway sits inline between the consumer and the backend, it can inspect and mutate the request body/headers in flight, removing or masking sensitive attributes such as names, emails, or account numbers. This makes it the correct control for enforcing data minimization at the API layer.

Answer

Rate limiting

Answer

OAuth 2.0 validation

Answer

CORS policy

Question 8

What is the primary function of a 'Data Inventory' in a privacy program?

Accepted Answer

To record the location, purpose, and sensitivity of personal data. A Data Inventory is a foundational component of a privacy program. It catalogs personal data elements, recording where data is stored, why it is collected (purpose), and its sensitivity level. This enables organizations to understand data flows, comply with regulations, and respond to data subject requests.

Answer

To automatically encrypt files

Answer

To manage physical server hardware

Answer

To perform user authentication

Question 9

Which TWO outcomes result from effective data classification?

Accepted Answer

Improved application of security controls. Effective data classification is the process of labeling data by sensitivity and value so that handling rules can be tied to each category. Option A is correct because classification drives improved application of security controls: once data is tagged (e.g., Public, Internal, Confidential, Restricted), the appropriate controls such as encryption, access control lists, and DLP policies can be applied consistently and proportionally to each class. Option B is correct because classification enables automated enforcement of retention policies: retention schedules and disposal rules can be mapped to classification labels, allowing systems (e.g., records management or DLP tools) to automatically retain, archive, or delete data per policy. Option C is not a result of classification, since server processing speed depends on hardware, workload, and tuning, not on data labeling. Option D is not guaranteed, as classification organizes and governs data but does not by itself reduce its volume. Option E is unrelated, because user interface design concerns presentation and usability, not data classification outcomes.

Answer

Increased server processing speed

Answer

Reduction in data volume

Answer

Improved user interface design

Question 10

Which THREE factors should be considered when defining a data retention schedule?

Accepted Answer

Regulatory/Legal requirements. Option B (Regulatory/Legal requirements) is correct because data retention schedules must comply with laws and regulations such as GDPR, HIPAA, SOX, or PCI DSS, which mandate minimum or maximum retention periods for specific data types. Option D (Statutory limitations periods) is correct because the time window in which legal claims can be filed dictates how long records must be preserved to support potential litigation or audits. Option E (Operational business utility) is correct because data that still serves ongoing business functions, such as customer history or transaction records, must be retained for as long as it provides operational value. Option A (number of concurrent users) is not relevant because concurrency affects performance sizing, not how long data should be kept. Option C (storage server hardware cost) is not a defining factor because cost may influence implementation choices but does not determine the legally or operationally required retention period.

Answer

The number of concurrent users

Answer

Storage server hardware cost

Question 11

Which of the following is the most effective method for evaluating the maturity of a privacy governance program?

Accepted Answer

Using an established Privacy Capability Maturity Model (PCMM).. A Privacy Capability Maturity Model (PCMM) provides a structured, repeatable framework with defined maturity levels (e.g., initial, managed, defined, quantitatively managed, optimizing) against which the governance program's processes, controls, and outcomes can be objectively assessed. It is the only option that evaluates the program holistically across dimensions like policy, training, monitoring, and continuous improvement. This makes it the most effective and defensible method for measuring maturity.

Answer

Checking for the presence of a Privacy Impact Assessment template.

Answer

Reviewing the number of cookies on the public website.

Answer

Asking employees if they like the privacy policy.

Question 12

A global retailer has a privacy program that is managed regionally, leading to inconsistent data subject request (DSR) handling times and conflicting interpretations of consent requirements. The Chief Privacy Officer wants to improve consistency while allowing regions to adapt to local laws. Which governance approach BEST balances these needs?

Accepted Answer

Adopt a federated model with a central privacy office setting minimum standards and regional privacy leads responsible for local implementation. A federated privacy governance model establishes central standards and oversight while empowering regional teams to implement locally appropriate practices. This balances the need for consistent DSR handling and consent interpretation with the flexibility to comply with diverse legal requirements. Centralized or fully decentralized models fail to achieve this balance, and outsourcing does not inherently provide the needed regional adaptability.

Answer

Implement a centralized privacy operating model where all DSRs and consent decisions are made by the global privacy team

Answer

Outsource all privacy operations to a third-party service provider with global reach

Answer

Allow each region to continue managing privacy independently but require them to report metrics to the global privacy team

Question 13

What is the primary function of a privacy policy for external users?

Accepted Answer

To inform data subjects about the processing of their data.. A privacy policy is a transparency instrument that informs data subjects — customers, users, website visitors — about what personal data is collected, why it is processed, how long it is retained, with whom it is shared, and what rights they have. It fulfills the GDPR Articles 13–14 transparency obligations and CCPA/CPRA notice-at-collection requirements. Its primary function is therefore to inform data subjects about the processing of their data.

Answer

To prevent all data collection.

Answer

To list the names of all employees.

Answer

To act as a legal contract for system performance.

Question 14

A multinational retailer is designing a new loyalty program that offers personalized discounts based on purchase history. The privacy team must ensure that the program complies with the GDPR's data protection by design and by default requirements. Which of the following should be implemented FIRST to meet these obligations?

Accepted Answer

Conduct a data protection impact assessment (DPIA) before the program goes live.. Under GDPR Article 35, a DPIA must be carried out prior to processing that is likely to result in a high risk, such as profiling. The DPIA identifies risks and informs the design of the loyalty program, ensuring privacy by design and by default. Other measures like consent or cookie banners are important but follow the risk assessment.

Answer

Implement a cookie banner that allows users to opt out of tracking.

Answer

Obtain explicit consent from all participants for profiling.

Answer

Appoint a Data Protection Officer (DPO) to oversee the program.

Question 15

A US-based retailer with e-commerce operations in the EU and California wants to establish a unified privacy governance structure. The Chief Privacy Officer must decide how to allocate decision-making authority for privacy policies across the organization. Which approach best balances global consistency with local legal compliance?

Accepted Answer

A hybrid governance model where the Chief Privacy Officer establishes global privacy principles and a central team coordinates, while regional privacy leads adapt policies to local laws within those principles.. A hybrid governance model allows the organization to maintain a consistent global privacy framework while respecting local legal requirements. The central team sets principles and coordinates, and regional leads adapt policies to specific laws. This approach ensures both compliance and operational efficiency, making it the most effective for a multinational retailer facing diverse regulations.

Answer

A federated model where each regional privacy lead has full autonomy to set policies for their jurisdiction, with no central oversight.

Answer

An outsourced model where an external law firm is given full authority to create and enforce privacy policies across all jurisdictions.

Answer

A centralized model where the Chief Privacy Officer sets all policies globally, with regional leads responsible only for implementation.