CDPSE Practice Test 3 — 10 Questions

Question 1

Which principle is represented by ensuring a user's data is only available to the specific application service that needs it?

Accepted Answer

Principle of least privilege. This is the core definition of the principle of least privilege, a pillar of Privacy by Design.

Answer

Data segregation

Answer

Data portability

Answer

Data availability

Question 2

When conducting a Privacy Impact Assessment (PIA) for a new application, what is the role of 'Data Mapping'?

Accepted Answer

To define the flow of PII throughout the application. Data mapping identifies the flow and storage locations, which is the foundation for conducting a meaningful PIA.

Answer

To provide encryption keys

Answer

To automate user consent

Answer

To purge old data records

Question 3

Which TWO attributes are essential to include in a data mapping register for privacy compliance?

Accepted Answer

Purpose of processing. Knowing the purpose (why) and the location (where) is foundational for privacy accountability.

Answer

Hardware serial number

Answer

Daily electricity consumption

Answer

Operating system version

Question 4

A privacy engineer is using Terraform to enforce encryption at rest for S3 buckets. Which resource attribute should be set to 'aws:kms'?

Accepted Answer

server_side_encryption_configuration. The 'sse_algorithm' attribute must be set to 'aws:kms' to enforce server-side encryption with KMS.

Answer

bucket_acl

Answer

versioning_enabled

Answer

public_access_block

Question 5

In Collibra, you are mapping a data element to a business term to support data minimization. What is the effect of changing the 'Data Stewardship' workflow status to 'Deprecated'?

Accepted Answer

Archives the metadata record and removes it from search. Deprecation in Collibra removes the asset from active discovery catalogs, preventing further use and supporting minimization.

Answer

Triggers an immediate deletion task in the source DB

Answer

Deletes the physical data source

Answer

Prevents unauthorized users from editing the metadata

Question 6

A privacy analyst is conducting a data map in ServiceNow. Which feature allows them to link a database table directly to a 'Processing Activity' record?

Accepted Answer

Data Asset Mapping. ServiceNow's Privacy Management module uses 'Data Source Mapping' to link IT assets to business processes.

Answer

Workflow Designer

Answer

Configuration Item (CI) Relation

Answer

Business Service Mapping

Question 7

You are configuring a data retention policy in AWS S3 Lifecycle rules. Which action should be selected to minimize data storage costs while remaining compliant with privacy laws?

Accepted Answer

Transition to Glacier. Transitioning objects to 'Glacier Instant Retrieval' minimizes cost while keeping data available for audits.

Answer

Enable Versioning

Answer

Delete incomplete multipart uploads

Answer

Expire objects

Question 8

You are managing Azure Information Protection (AIP) labels. Which action is necessary to ensure that documents classified as 'Highly Confidential' are automatically encrypted?

Accepted Answer

Configure Protection settings in the Label. In AIP, label configuration requires selecting 'Encrypt' under the 'Protection' settings to enforce technical controls.

Answer

Modify the Information Rights Management (IRM) template

Answer

Apply Azure Policy

Answer

Enable Auto-Labeling on the Data Source

Question 9

In the context of data classification, which metadata field is most critical for determining the disposal date?

Accepted Answer

Retention Start Date. The 'Created Date' or 'Last Modified' field is the baseline for calculating the disposal date based on a fixed retention period.

Answer

Data Owner

Answer

Encryption Key ID

Answer

Classification Label

Question 10

Which TWO methods are commonly used to achieve data minimization in a legacy database?

Accepted Answer

Anonymization of records. Anonymization and data purging are direct methods to reduce the footprint of sensitive data.

Answer

Mirroring the database

Answer

Implementing multi-factor authentication

Answer

Increasing database indexing