CDPSE Practice Test 4 — 25 Questions

Question 1

What is the primary function of a privacy policy for external users?

Accepted Answer

To inform data subjects about the processing of their data.. Transparency is the main goal of external-facing privacy policies.

Answer

To prevent all data collection.

Answer

To list the names of all employees.

Answer

To act as a legal contract for system performance.

Question 2

In AWS Glue, a developer needs to ensure that sensitive columns are automatically identified and redacted during ETL jobs. Which component is best suited for this?

Accepted Answer

Glue DataBrew. Glue DataBrew allows for data profiling and recipe-based transformations including PII redaction.

Answer

AWS Glue Schema Registry

Answer

AWS Lake Formation

Answer

Amazon Macie

Question 3

When implementing Secure Multi-Party Computation (SMPC), what is the primary benefit?

Accepted Answer

Computation on private inputs. SMPC allows multiple parties to compute a function over their inputs while keeping those inputs private from each other.

Answer

No data movement required

Answer

Full public data visibility

Answer

High speed performance

Question 4

Which THREE privacy-enhancing technologies are commonly used to facilitate data analysis on distributed datasets without centralizing the raw PII?

Accepted Answer

Federated Learning. SMPC, Federated Learning, and Differential Privacy all allow for privacy-preserving analysis of distributed data.

Answer

Full disk encryption

Answer

Network load balancing

Question 5

When configuring 'Dynamic Data Masking' in SQL Server, which permission is required for a user to see the unmasked data?

Accepted Answer

UNMASK permission. The 'UNMASK' permission is required for a user to view the original values hidden by dynamic data masking.

Answer

db_datareader

Answer

SELECT permission

Answer

sysadmin role

Question 6

What is the primary function of a 'Data Protection Impact Assessment' (DPIA) from an engineering perspective?

Accepted Answer

To identify privacy risks in system design. A DPIA helps identify privacy risks in the design phase so that controls can be implemented early.

Answer

To test software security

Answer

To document legal agreements

Answer

To manage budget

Question 7

Which TWO actions should be taken when decommissioning an old server containing PII?

Accepted Answer

Cryptographic erasure of the drives. Cryptographic erasure and physical destruction are industry-standard methods for ensuring data cannot be recovered.

Answer

Saving logs to a cloud bucket

Answer

Moving data to a temporary folder

Answer

Reformatting the partition

Question 8

Which TWO of the following are key components of a robust privacy governance framework?

Accepted Answer

Clear assignment of roles and responsibilities.. Accountability and transparent policies are foundational to any privacy framework.

Answer

A mandate to block all internet access.

Answer

The office floor plan.

Answer

A list of employee social media passwords.

Question 9

Which technique is most effective for minimizing PII in a non-production database environment while maintaining referential integrity?

Accepted Answer

Tokenization. Format-preserving encryption or tokenization maintains the structure of the data for testing while protecting the underlying PII.

Answer

Full deletion

Answer

Masking with random noise

Answer

Hashing with a static salt

Question 10

In a database, you need to replace social security numbers with a consistent, non-reversible value for analytics. What is the best approach?

Accepted Answer

Salted one-way hashing. Salted hashing produces a consistent value that is non-reversible, ideal for analytics without needing to recover the original ID.

Answer

Deterministic encryption

Answer

Format-preserving encryption

Answer

Randomized tokenization

Question 11

In the context of Privacy by Design, what is the primary role of an 'Access Control Matrix' in a microservices architecture?

Accepted Answer

Principle of least privilege implementation. It explicitly maps subjects to objects and permissions, ensuring the principle of least privilege.

Answer

Log aggregation

Answer

Threat modeling

Answer

Data classification

Question 12

When designing a data retention policy, which technical configuration in S3 best automates the process?

Accepted Answer

S3 Lifecycle policy. S3 Lifecycle policies allow for automatic transition or deletion of objects based on age.

Answer

S3 Replication

Answer

S3 Inventory

Answer

S3 Object Lock

Question 13

What is the primary privacy advantage of using 'On-Device Processing' for machine learning inference?

Accepted Answer

Reduction in data transfer of sensitive inputs. On-device processing keeps raw user data on the local device, preventing the need to transmit sensitive information to a central server.

Answer

Easier debugging of the model

Answer

Faster cloud infrastructure scaling

Answer

Improved model accuracy

Question 14

When implementing differential privacy in a data analytics pipeline, what is the primary technical trade-off the engineer must balance?

Accepted Answer

Privacy budget and accuracy. The epsilon parameter controls the privacy budget, affecting the accuracy of the output and the level of privacy protection.

Answer

Anonymization speed and data volume

Answer

Encryption speed and latency

Answer

Scalability and storage costs

Question 15

Which THREE features are essential when implementing a robust 'Consent Management Platform' (CMP)?

Accepted Answer

Immutable consent audit logs. A CMP must allow for granular consent, withdrawal, and audit trails to be compliant.

Answer

Automatic account creation

Answer

Automated data deletion

Question 16

You are configuring an API gateway to implement 'Data Minimization' via response filtering. How is this typically achieved for JSON payloads?

Accepted Answer

By implementing field-level response transformation. Response transformation or JSON schema validation allows the gateway to strip sensitive fields from the response body before it reaches the client.

Answer

By using TLS 1.3 encryption

Answer

By increasing the request timeout

Answer

By modifying the backend database schema

Question 17

Which TWO of the following are effective ways to protect logs that contain PII?

Accepted Answer

Encryption at rest. Encryption and restricted access control are necessary for protecting sensitive data inside log files.

Answer

Disabling log rotations

Answer

Broad read access for all employees

Answer

Sending logs to a public URL

Question 18

Which THREE items should be included in a Privacy Policy that aligns with global transparency requirements?

Accepted Answer

The purpose and legal basis for the processing of personal data.. The purpose, the retention period, and the rights of the user are fundamental components of a compliant privacy policy.

Answer

The company's quarterly financial earnings report.

Answer

The internal passwords of the IT administrators.

Question 19

What is the first step in conducting a privacy audit?

Accepted Answer

Defining the scope and objectives of the audit.. Defining the scope is critical to ensuring the audit focuses on the right areas.

Answer

Asking employees for their lunch preferences.

Answer

Buying new security software.

Answer

Writing the final audit report.

Question 20

An organization is using 'Bring Your Own Key' (BYOK) in their cloud environment. What is the primary privacy benefit?

Accepted Answer

Control over key lifecycle. BYOK allows the data controller to maintain custody of the encryption keys, preventing the cloud provider from accessing the data.

Answer

Faster encryption processing

Answer

Improved data availability

Answer

Reduced storage costs