CDPSE Practice Test 5 — 10 Questions

Question 1

When managing data retention in Azure Data Lake Storage (ADLS) Gen2, how do you implement a policy that deletes files older than 7 years?

Accepted Answer

Configure a Lifecycle Management policy rule. Lifecycle management policies in ADLS allow you to define rules to delete blobs based on the number of days since last modification.

Answer

Apply a Data Loss Prevention policy

Answer

Create a Power Automate flow to scan the lake

Answer

Use Azure Data Factory to trigger a DELETE SQL query

Answer

Set the 'Delete' flag on the container

Question 2

Which document should a CDPSE review to understand the organization's legal basis for processing employee personal data?

Accepted Answer

The Record of Processing Activities (ROPA).. The Privacy Notice or the internal Record of Processing Activities (ROPA) outlines the legal basis for processing.

Answer

The vendor management list.

Answer

The firewall configuration log.

Answer

The employee handbook.

Question 3

When establishing a privacy steering committee, who should be included to ensure organizational support?

Accepted Answer

Senior representatives from Legal, IT, HR, and Marketing.. Executive sponsorship from cross-functional leadership is vital for authority.

Answer

Only the Human Resources team.

Answer

External consultants only.

Answer

Only the IT staff.

Question 4

In a Google Cloud environment, you need to implement a policy to automatically redact PII from documents uploaded to Cloud Storage. Which service should be integrated?

Accepted Answer

Cloud Data Loss Prevention (DLP) API. Cloud Data Loss Prevention (DLP) API allows for the inspection, de-identification, and redaction of PII within unstructured data.

Answer

Cloud Storage buckets lifecycle policy

Answer

Cloud Identity and Access Management

Answer

Cloud Logging

Question 5

You are designing a system for k-anonymity. If a dataset has an identifier that is unique to every row, what is the first step you must take before applying generalization?

Accepted Answer

Apply suppression to direct identifiers. Quasi-identifiers must be identified, and direct identifiers must be suppressed or removed, as k-anonymity does not protect against direct identification.

Answer

Add synthetic noise

Answer

Normalize the dataset

Answer

Increase the k-value

Question 6

Which TWO of the following are key privacy engineering objectives when designing a system that processes sensitive health data?

Accepted Answer

Data minimization. Data minimization and transparency are fundamental to privacy engineering for sensitive data.

Answer

Hardware cost reduction

Answer

Maximum system availability

Answer

High performance throughput

Question 7

A privacy engineer is reviewing a 'consent management platform' (CMP). Which configuration is necessary to ensure compliance with a user's choice to 'opt-out' of data sharing?

Accepted Answer

Programmatic propagation of the opt-out signal. The CMP must broadcast the opt-out signal to all downstream ad-tech and analytics providers via a standardized framework like GPP or TCF.

Answer

Sending an email confirmation to the user

Answer

Storing the choice in a local browser cookie only

Answer

Displaying the privacy policy on the landing page

Question 8

When classifying data for privacy, what does a 'Restricted' label usually signify?

Accepted Answer

Data requiring limited access and enhanced protection. Restricted data is highly sensitive and requires strict access controls and specific handling to prevent unauthorized access.

Answer

Data that can be shared publicly

Answer

Data that has no retention period

Answer

Data that is no longer needed

Question 9

A privacy engineer is configuring Azure Data Factory to ensure PII is masked during integration. Which feature should be configured to apply dynamic data masking on SQL targets?

Accepted Answer

SQL Dynamic Data Masking policies. Dynamic Data Masking (DDM) in Azure SQL Database allows masking sensitive data, which can be enforced via integration pipelines.

Answer

Azure Policy definition

Answer

Data Factory Mapping Data Flows

Answer

Azure Key Vault access policies

Question 10

Which THREE techniques effectively protect data during the 'use' phase of the life cycle?

Accepted Answer

Pseudonymization. Encryption, masking, and pseudonymization are standard techniques for protecting data during active processing.

Answer

Data replication

Answer

Data compression