CDPSE Practice Test 4 — 25 Questions

Question 1

You are integrating a homomorphic encryption library into a cloud-based financial system. What is the primary trade-off you must communicate to stakeholders regarding the implementation of Fully Homomorphic Encryption (FHE)?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Significant latency during computation. Fully Homomorphic Encryption (FHE) enables arbitrary computations on encrypted data, but the cryptographic operations are orders of magnitude slower than plaintext computations, causing significant latency. This latency is the primary trade-off that must be communicated to stakeholders, as it impacts system responsiveness and throughput. Other options like storage or integrity are not the main concerns.

Answer

Incompatibility with cloud storage

Answer

Increased storage requirements

Answer

Loss of data integrity

Question 2

A privacy engineer is reviewing a new marketing analytics tool that will process customer email addresses and purchase histories. The tool vendor proposes to store all data in a multi-tenant cloud database. Which privacy engineering control is most critical to implement to prevent cross-tenant data leakage?

Accepted Answer

Implement tenant isolation through separate database schemas or row-level security with tenant ID filtering.. Tenant isolation through separate schemas or row-level security is the most critical control to prevent cross-tenant data leakage. It enforces logical separation at the data layer, ensuring queries are scoped to the correct tenant. Encryption with a shared key, WAF, and auditing do not prevent logical leakage. Thus, tenant isolation is essential.

Answer

Enable database auditing to log all queries for later review.

Answer

Encrypt the database with a single encryption key managed by the vendor.

Answer

Use a web application firewall (WAF) to block SQL injection attacks.

Question 3

A CDPSE is designing the privacy risk register for a new mobile health application that continuously transmits heart-rate and sleep data to a cloud analytics platform. The organization wants to demonstrate that privacy risks are managed consistently with enterprise risk appetite. Which approach BEST integrates privacy risk into the existing enterprise risk management framework?

Accepted Answer

Map privacy risk scenarios to the enterprise likelihood and impact scales and assign owners through the existing risk governance process.. Integrating privacy risk into enterprise risk management requires using the organization's existing likelihood and impact scales, governance structures and ownership model. This enables privacy risks to be evaluated alongside other risks, prioritized consistently and managed within the same treatment and reporting cycles. A separate or purely legal approach fragments risk oversight and weakens accountability.

Answer

Use a qualitative heat map without numeric scores so that privacy risks are not compared against financial or operational risks.

Answer

Maintain a separate privacy risk register scored on a 1–5 scale defined by the privacy team and report it only to the chief privacy officer.

Answer

Treat all privacy risks as compliance issues and track them in the legal department's obligation register until they are closed.

Question 4

A privacy analyst is reviewing the data life cycle for a new mobile application that collects user location data. The analyst must ensure that location data is not retained longer than necessary for the app's core functionality, which is providing real-time navigation. Which data life cycle stage is MOST directly concerned with limiting the retention period?

Accepted Answer

Data retention. The data retention stage is specifically about defining and enforcing how long data is kept. For location data in a navigation app, retention should be limited to the period needed for the service, after which disposal occurs. This stage directly implements the storage limitation principle by setting timeframes and triggers for deletion.

Answer

Data collection

Answer

Data storage

Answer

Data disposal

Question 5

A privacy engineer is designing a data retention and deletion capability for a cloud-native application that stores personal data in an object storage bucket with versioning enabled and in a relational database with point-in-time recovery. The engineer must ensure that deletion requests are fully honored across both stores. Which TWO actions should the engineer take? (Choose two.)

Accepted Answer

Implement a deletion workflow that removes the data subject's rows and then expires the relevant database backups and snapshots according to a defined retention schedule.. Deletion in cloud-native stores must account for residual copies. Expiring non-current object versions with lifecycle rules removes the older copies that versioning retains, and a deletion workflow that also expires backups and snapshots removes the relational store's residual copies. Disabling recovery, enabling object lock, or relying on vacuum does not achieve complete deletion.

Answer

Disable point-in-time recovery on the relational database so that deleted rows cannot be restored.

Answer

Rely on the database's automatic vacuum process to remove deleted rows from all storage layers.

Answer

Enable object lock in governance mode on the bucket to prevent any deletion of personal data.

Question 6

A privacy team is designing a new customer loyalty program. They want to ensure that personal data is not kept longer than necessary and that it is securely destroyed when no longer needed. Which data life cycle management phase directly addresses the secure destruction of personal data?

Accepted Answer

Data disposal. The data life cycle includes phases such as collection, storage, use, sharing, and disposal. Secure destruction of personal data when it is no longer needed is the core objective of the data disposal phase. This phase ensures that data is irreversibly destroyed or anonymized, reducing the risk of unauthorized access and helping organizations comply with data protection regulations.

Answer

Data collection

Answer

Data storage

Answer

Data use

Question 7

A multinational retailer processes customer loyalty data across the EU, UK and Brazil. The CDPSE is asked to establish a privacy compliance monitoring program that provides assurance to the board. Which control objective is MOST important for demonstrating ongoing compliance with diverse regulatory requirements?

Accepted Answer

Timely identification and remediation of gaps between actual processing activities and documented privacy requirements.. For board-level assurance across multiple jurisdictions, the most important control objective is the ability to detect and remediate gaps between actual processing and documented privacy requirements. This demonstrates that compliance is actively monitored and corrected, rather than relying on indirect metrics such as training or complaint handling. It directly addresses the risk of regulatory breaches in a complex, multi-jurisdictional environment.

Answer

Percentage of customer complaints resolved within the service-level agreement.

Answer

Number of privacy impact assessments completed per quarter.

Answer

Annual privacy training completion rate for all employees who handle personal data.

Question 8

A multinational corporation uses a data lake to store customer data from various sources. The privacy team wants to implement a data minimization strategy that reduces the attack surface and ensures compliance with global privacy regulations. Which approach best aligns with the principle of data minimization in this context?

Accepted Answer

Aggregate and anonymize data at the point of ingestion, retaining only the aggregated results for analytics and discarding raw PII.. Data minimization requires collecting and retaining only the personal data that is necessary for the specified purpose. In a data lake, aggregating and anonymizing data at ingestion ensures that raw PII is not stored, reducing the risk of exposure and helping comply with privacy regulations. Other options focus on security controls or obfuscation but do not reduce the amount of PII retained.

Answer

Implement field-level encryption for all personally identifiable information (PII) and store the encryption keys in a hardware security module (HSM).

Answer

Use data masking to obfuscate PII in non-production environments while keeping full data in production for business use.

Answer

Store all raw data in a centralized repository and apply access controls based on role-based access control (RBAC) to restrict who can view PII.

Question 9

A privacy manager at a rapidly growing healthcare technology company is designing the organization's privacy governance structure. The company has a small privacy team and wants to ensure that privacy decisions are made quickly and consistently across all business units. Which of the following governance models would BEST achieve this goal?

Accepted Answer

A centralized model where a single privacy office, led by a Chief Privacy Officer, has authority over privacy decisions across all units. A centralized privacy governance model is most effective for a growing organization with a small privacy team because it enables quick, consistent decisions and efficient use of limited resources. By vesting authority in a single privacy office, the organization ensures that privacy requirements are applied uniformly across all business units, reducing the risk of conflicting practices and compliance gaps.

Answer

A federated model where each business unit manages privacy independently but shares best practices through a voluntary community of practice

Answer

A decentralized model where each business unit has its own privacy lead who reports to the unit head

Answer

An outsourced model where an external law firm provides all privacy guidance and decision-making

Question 10

A company needs to share customer demographics with a third party. Which technique allows for statistical analysis without revealing individual identities?

Accepted Answer

Differential privacy. Differential privacy adds calibrated statistical noise to query results so that aggregate analysis is possible while individual records cannot be distinguished or re-identified. It provides a mathematical privacy guarantee, making it suitable for sharing demographics for statistical analysis without revealing identities.

Answer

Encryption

Answer

Data deletion

Answer

Pseudonymization

Question 11

A financial services company is revising its privacy governance framework to better integrate privacy risk management with its enterprise risk management (ERM) program. The Chief Privacy Officer wants to ensure that privacy risks are consistently identified, assessed, and treated in alignment with other organizational risks. Which of the following is the MOST critical action to achieve this integration?

Accepted Answer

Adopt the enterprise risk management framework's risk assessment methodology and scales for privacy risk assessments. Using the ERM framework's risk assessment methodology and scales for privacy risks is critical because it enables consistent evaluation, prioritization, and treatment of privacy risks alongside other organizational risks. This alignment supports integrated risk reporting and decision-making, ensuring that privacy risks receive appropriate attention and resources within the broader risk management context.

Answer

Assign all privacy risk management responsibilities to the internal audit department

Answer

Develop a separate privacy risk register that is maintained independently from the ERM risk register

Answer

Conduct annual privacy risk assessments separately from the ERM risk assessment cycle

Question 12

A global retailer is expanding into new markets and needs a holistic view of how personal data moves across its subsidiaries and third parties. The Chief Privacy Officer wants a single, visual representation that maps data flows, identifies cross-border transfers, and highlights potential risk points. Which privacy governance tool should be used to achieve this?

Accepted Answer

Data flow mapping. Data flow mapping is the only tool that provides a visual, end-to-end view of personal data movement, which is essential for understanding cross-border transfers and identifying risk points. The other options are important privacy governance instruments, but they do not deliver the holistic, visual representation required for this scenario.

Answer

Data protection impact assessment (DPIA)

Answer

Privacy maturity assessment

Answer

Record of processing activities (ROPA)

Question 13

A privacy analyst is reviewing the data life cycle management process for a healthcare organization. The organization wants to ensure that data is properly managed from creation to disposal. Which TWO of the following are key activities in the data disposal phase? (Choose two.)

Accepted Answer

Verifying that data has been irreversibly destroyed across all storage locations and backups.. The data disposal phase involves securely destroying data when it is no longer needed and ensuring that the destruction is complete and documented. Verifying irreversible destruction across all locations and maintaining documentation and audit trails are key activities. Other options pertain to earlier phases such as collection, storage, or use, and do not directly contribute to secure disposal.

Answer

Implementing access controls to restrict who can view the data during its active use.

Answer

Collecting consent from data subjects for processing their personal data.

Answer

Encrypting data at rest to protect it from unauthorized access.

Question 14

A CDPSE is advising a financial services firm that wants to outsource its customer call recording and analytics to a cloud provider. The recordings contain personal data and some payment card information. The firm must ensure the outsourcing arrangement meets privacy and compliance expectations. Which TWO actions should the CDPSE recommend as part of the vendor risk management process? (Choose two.)

Accepted Answer

Require the vendor to provide evidence of independent third-party certifications and audit reports relevant to privacy and security.. Effective vendor risk management for sensitive data includes independent assurance through certifications and audits, and enforceable contractual clauses that define data protection obligations, breach notification and audit rights. Together, these actions provide the firm with evidence of the vendor's controls and the legal means to enforce compliance, while preserving the firm's accountability.

Answer

Allow the vendor to use the data for its own product improvement purposes to reduce costs.

Answer

Rely on the vendor's standard terms of service without customization to expedite the contract.

Answer

Transfer all accountability for data protection compliance to the vendor through a liability waiver.

Question 15

A multinational retailer is implementing a new customer loyalty program that collects purchase history, location data, and communication preferences across its mobile app and in-store point-of-sale systems. The CDPSE is asked to ensure that the privacy notice provided to customers meets the transparency requirements of the GDPR and similar laws. Which of the following is the MOST critical element to include in the privacy notice to satisfy these requirements?

Accepted Answer

The specific purposes of processing, the legal basis for each purpose, and the categories of recipients of the personal data.. The GDPR and similar laws require privacy notices to be specific and meaningful, not merely generic statements. Data subjects must be informed of the purposes of processing, the legal basis relied upon for each purpose, and the categories of recipients to whom data will be disclosed. This enables individuals to understand how their data is used and to exercise their rights effectively. The other options either provide insufficient detail or focus on irrelevant information such as internal security measures.

Answer

A detailed description of the organization's internal data security measures, including encryption algorithms and access controls.

Answer

A statement that the organization complies with all applicable data protection laws.

Answer

A list of all third-party vendors that have access to personal data, including their contact details.

Question 16

A small e-commerce company is creating a data retention schedule for its customer database. The privacy team wants to ensure that customer records are not kept longer than necessary. Which action should be taken first to establish an effective retention schedule?

Accepted Answer

Classify all customer data by type and sensitivity to determine appropriate retention periods.. An effective retention schedule begins with understanding the data. Classifying customer data by type and sensitivity allows the organization to assign retention periods based on legal requirements, business needs, and privacy risk. Without this foundation, retention decisions are arbitrary. Automated deletion, encryption, and archiving are either premature or unrelated to setting retention periods. Therefore, classification is the necessary first step.

Answer

Archive all customer records to a separate storage system for long-term preservation.

Answer

Encrypt the customer database to protect records from unauthorized access.

Answer

Implement automated deletion scripts that remove records after one year.

Question 17

A multinational retail corporation is updating its privacy governance framework to address new data protection regulations in multiple jurisdictions. The Chief Privacy Officer wants to ensure that the framework includes mechanisms for ongoing compliance monitoring and continuous improvement. Which of the following should be implemented FIRST to establish a foundation for effective monitoring?

Accepted Answer

Conduct a comprehensive data inventory and mapping exercise to identify all personal data flows. A comprehensive data inventory and mapping exercise is the essential first step because it provides the necessary visibility into personal data processing activities. This visibility enables the organization to identify compliance gaps, prioritize monitoring efforts, and implement effective controls. Without it, subsequent monitoring tools and governance structures lack the data they need to function effectively.

Answer

Establish a privacy steering committee to oversee compliance monitoring efforts

Answer

Implement a training program for all employees on privacy compliance requirements

Answer

Deploy a privacy management software platform to automate compliance tracking

Question 18

A healthcare organization is establishing a privacy governance framework. The Chief Privacy Officer wants to ensure that privacy policies are consistently applied across all departments. Which mechanism is most effective for achieving this consistency?

Accepted Answer

Implement a centralized privacy policy repository with mandatory training and periodic audits.. A centralized repository combined with training and audits ensures that all departments adhere to the same privacy policies. This approach provides clear guidance, reinforces expectations, and enables ongoing monitoring. It is the most effective way to achieve consistent application of privacy policies across a healthcare organization.

Answer

Delegate policy enforcement to department heads without central monitoring.

Answer

Allow each department to develop its own privacy policies based on its specific needs.

Answer

Rely on the legal department to review departmental policies only when a complaint is filed.

Question 19

A healthcare organization is revising its privacy governance structure after a series of data incidents involving unauthorized access by employees. The board wants to ensure accountability and reduce future risks. Which TWO of the following actions should be prioritized to strengthen governance? (Choose two.)

Accepted Answer

Establish a privacy steering committee that includes senior leaders from legal, IT, and clinical operations.. Mandatory role-based training and a cross-functional steering committee directly address the governance gaps that led to unauthorized access. Training reduces human error and builds awareness, while the committee ensures accountability and strategic oversight. Together, they create a stronger privacy culture and structure.

Answer

Increase the number of privacy impact assessments conducted annually.

Answer

Publish a revised privacy notice on the organization's website.

Answer

Delegate all privacy decision-making to the IT security department.

Question 20

A financial services company is implementing a new privacy governance framework. The Chief Privacy Officer wants to ensure that privacy risks are identified and addressed at the earliest stages of any new project. Which of the following approaches BEST integrates privacy into project management?

Accepted Answer

Embedding privacy requirements into the system development life cycle (SDLC). Embedding privacy into the SDLC is the most effective way to integrate privacy into project management because it makes privacy a continuous, structured component of every project phase. This ensures early risk identification and mitigation, whereas training, champions, or a single pre-initiation assessment are less systematic and may not address evolving risks.

Answer

Appointing a privacy champion in each business unit

Answer

Requiring a privacy impact assessment (PIA) before project initiation

Answer

Conducting annual privacy training for all project managers