CDPSE Practice Questions 2 — 50 Questions

Question 1

You are designing a system for k-anonymity. If a dataset has an identifier that is unique to every row, what is the first step you must take before applying generalization?

Accepted Answer

Apply suppression to direct identifiers. Before generalization can produce meaningful equivalence classes, direct identifiers (names, SSNs, email addresses) that uniquely identify each row must be removed or suppressed. If a unique direct identifier remains, every row stays distinguishable regardless of how much you generalize quasi-identifiers, defeating k-anonymity. Suppression of direct identifiers is therefore the mandatory first step in the standard k-anonymity pipeline (remove direct identifiers, then generalize/suppress quasi-identifiers).

Answer

Add synthetic noise

Answer

Normalize the dataset

Answer

Increase the k-value

Question 2

What does a 'Privacy-Enhancing Technology' (PET) primarily aim to achieve?

Accepted Answer

Minimizing or protecting personal data. Privacy-Enhancing Technologies (PETs) are a class of technical measures designed to protect personal data throughout its lifecycle by minimizing collection, limiting linkability, and reducing identifiability. Their core objective is to enable data processing while safeguarding individual privacy, not to improve infrastructure performance. Options like processing power, bandwidth, and software quality are unrelated to the privacy purpose of PETs.

Answer

Increasing processing power

Answer

Improving network bandwidth

Answer

Reducing software bugs

Question 3

Which document should a CDPSE practitioner review first when establishing a new privacy governance program?

Accepted Answer

The existing business strategy and risk appetite.. A privacy governance program must be aligned with the organization's strategic direction and risk tolerance, so the first document to review is the existing business strategy and risk appetite. This establishes why the program exists, what business outcomes it must support, and how much privacy risk leadership is willing to accept. Without that context, a practitioner cannot prioritize regulatory obligations, allocate resources, or define meaningful metrics.

Answer

The list of current vendors.

Answer

The software inventory.

Answer

The technical architecture diagram.

Question 4

When conducting a privacy risk assessment, what is the significance of 'Data Lifecycle Management'?

Accepted Answer

It identifies privacy risks at each stage from collection to deletion.. Data Lifecycle Management (DLM) is significant in privacy risk assessments because it provides a structured framework to identify privacy risks at every stage of data handling — from collection, use, storage, sharing, to deletion. By mapping risks to each lifecycle phase, organizations can ensure controls are applied where they are most needed, such as consent at collection or secure deletion at end-of-life.

Answer

It reduces the power consumption of the storage systems.

Answer

It determines the software development methodology.

Answer

It ensures that the database is always updated with the latest patches.

Question 5

Which of the following is the most effective technical control for implementing the 'Right to be Forgotten' in a distributed microservices environment?

Accepted Answer

Implementing a centralized 'Identity Deletion' event bus. In a distributed microservices environment, personal data is scattered across many services and data stores, so honoring erasure requires coordinated action. A centralized 'Identity Deletion' event bus publishes a deletion event that each subscribing service consumes to erase or anonymize its copy of the subject's data, providing a scalable, auditable, and consistent mechanism. This event-driven pattern ensures no service is missed and creates a traceable record of propagation.

Answer

Deleting individual database records in each service

Answer

Archiving logs for 7 years

Answer

Increasing database logging levels

Question 6

To prevent 're-identification' of an anonymized dataset, what process should be applied if the dataset is merged with external public data?

Accepted Answer

Linkage attack analysis. A linkage attack analysis specifically evaluates whether an anonymized dataset can be re-identified by joining it with external public data using shared quasi-identifiers such as ZIP code, birth date, or gender. It is the process designed to detect and mitigate re-identification risk before or after data merging. This directly addresses the scenario of combining anonymized data with external sources.

Answer

Data validation

Answer

Backup encryption

Answer

Database normalization

Question 7

In the context of data classification, which metadata field is most critical for determining the disposal date?

Accepted Answer

Retention Start Date. The Retention Start Date is the most critical metadata field for determining the disposal date because it marks when the retention period begins. Retention policies typically specify a duration (e.g., 7 years) from a trigger event, and the Retention Start Date provides that trigger. Without it, the disposal date cannot be accurately calculated.

Answer

Data Owner

Answer

Encryption Key ID

Answer

Classification Label

Question 8

Which role is primarily responsible for ensuring that privacy policies are communicated effectively across the organization?

Accepted Answer

The Privacy Office or DPO.. The Privacy Office or Data Protection Officer (DPO) owns the privacy program and is accountable for drafting, approving, and disseminating privacy policies to all workforce members and relevant stakeholders. This role translates regulatory requirements (GDPR, CCPA, HIPAA) into operational policy and ensures consistent communication through training, awareness campaigns, and acknowledgments. Communication effectiveness is a governance responsibility, not an IT or audit function.

Answer

The janitorial staff.

Answer

The external auditors.

Answer

The IT helpdesk.

Question 9

A multinational corporation's privacy team is struggling to keep pace with new privacy laws across 20 countries. The chief privacy officer wants to shift from a reactive to a proactive governance model. Which initiative would BEST enable this transformation?

Accepted Answer

Implement a privacy management platform that tracks regulatory changes and automates assessments.. Implementing a privacy management platform best enables a proactive governance model by automating regulatory tracking, assessments, and reporting across multiple jurisdictions. It provides scalability and real-time visibility, allowing the privacy team to anticipate and respond to changes efficiently, rather than reacting after the fact.

Answer

Conduct an annual global privacy audit to identify gaps after laws take effect.

Answer

Hire additional privacy lawyers in each country to monitor legislative changes.

Answer

Delegate privacy compliance to local business units without central oversight.

Question 10

A privacy engineer is implementing a consent management platform for a mobile application. The platform must capture, store, and enforce user consent preferences across multiple microservices. Which two actions should the engineer take to ensure consent is technically enforceable and auditable? (Choose two.)

Accepted Answer

Store consent records with a timestamp, version of the privacy notice, and the specific purposes consented to.. To make consent technically enforceable and auditable, the engineer must both record granular consent details (timestamp, notice version, purposes) and enforce those preferences at the point of processing within each microservice. Recording alone does not prevent processing, and enforcement without a reliable record lacks proof. Together, they create a robust consent management system that supports compliance and user rights.

Answer

Encrypt consent records using a symmetric key stored in the application code to prevent tampering.

Answer

Rely on the mobile operating system's permission prompts as the sole mechanism for capturing consent for all data processing purposes.

Answer

Allow users to change their consent preferences only through a customer support ticket to maintain a controlled audit trail.

Question 11

A privacy engineer is designing a new mobile health application that will collect continuous heart rate data from wearable sensors. The application must comply with GDPR and the organization's privacy policy, which mandates data minimization and purpose limitation. The engineer proposes storing raw sensor data indefinitely to support future research. Which action should the engineer take to align with privacy engineering principles?

Accepted Answer

Implement a data retention schedule that automatically deletes raw sensor data after a defined period, retaining only aggregated or anonymized data for research.. The correct action is to implement a retention schedule that deletes raw data after a defined period and retains only aggregated or anonymized data for research. This enforces data minimization and storage limitation, key privacy engineering principles. Encryption, consent, and access controls are important but do not replace the need to limit data retention to what is necessary for the specified purpose.

Answer

Encrypt the raw sensor data at rest and in transit, and store it indefinitely because encryption protects against unauthorized access.

Answer

Store raw sensor data in a separate database with strict access controls, and allow only the research team to access it for any purpose.

Answer

Obtain explicit consent from users to store their data indefinitely for future research, and rely on that consent as the legal basis.

Question 12

A hospital's privacy team discovers that backup tapes containing patient records are kept indefinitely because the backup software's retention policy was never configured. The tapes are stored offsite and are not indexed, making it impossible to locate individual records. Which action should the privacy team take FIRST to address this data life cycle risk?

Accepted Answer

Implement a documented retention schedule for backup media that aligns with the hospital's data retention policy and legal hold requirements, then apply it to the backup software.. The core failure is the lack of a defined retention period for backup media, which leads to indefinite storage of patient records. A documented retention schedule aligned with legal and operational requirements is the foundational control. Once established, it can be applied to the backup software to automate disposal, ensuring data is not kept longer than necessary and that legal holds are respected.

Answer

Immediately erase all offsite backup tapes to eliminate the risk of unauthorized access.

Answer

Encrypt the backup tapes and continue storing them indefinitely.

Answer

Create an index of the backup tapes so that individual records can be located for access requests.

Question 13

A multinational retailer is implementing a data life cycle management program. The privacy team must ensure that personal data collected in the EU is not retained longer than necessary and that disposal is verifiable. Which two controls are essential to meet these objectives? (Choose two.)

Accepted Answer

Define and enforce retention periods for each data category based on business, legal, and regulatory requirements.. To ensure data is not retained longer than necessary and that disposal is verifiable, the program must define and enforce retention periods and implement automated deletion with audit logs. Retention periods set the 'when' for disposal, while automated workflows with logging provide the 'how' and the evidence. Other controls like encryption or training are valuable but do not directly achieve these specific objectives.

Answer

Encrypt all personal data at rest using AES-256.

Answer

Conduct annual privacy training for all employees.

Answer

Store all personal data in a single centralized database to simplify management.

Question 14

A marketing team wants to use customer email addresses for a new promotional campaign. The privacy office determines that the original consent was limited to order fulfillment. What is the most appropriate action under data life cycle management principles?

Accepted Answer

Obtain fresh consent from customers for the marketing purpose before using their email addresses.. The original consent was limited to order fulfillment, so using the email addresses for marketing requires a new lawful basis. Obtaining fresh consent is the most appropriate action because it respects the data subject's choice and complies with purpose limitation. Other options either ignore consent requirements or fail to achieve the marketing objective, making them unsuitable.

Answer

Use the email addresses for the campaign because the data is already collected and stored.

Answer

Proceed with the campaign but include an opt-out link in every email.

Answer

Anonymize the email addresses and then use them for the campaign.

Question 15

A multinational e-commerce company is implementing a privacy-preserving data analytics pipeline. The pipeline ingests customer behavior events from web and mobile apps, and analysts need to query the data without accessing raw PII. The company wants to ensure that even if the analytics environment is compromised, raw PII remains protected. Which approach best achieves this?

Accepted Answer

Tokenize PII at ingestion and store tokens in a separate vault; analysts query only tokenized data.. Tokenization at ingestion with a separate vault ensures that raw PII never enters the analytics environment. Analysts query tokenized data, preserving analytical utility while protecting PII. Encryption with key access or row-level security still allows access to raw PII under certain conditions. Thus, tokenization with a vault is the most effective approach.

Answer

Store raw events in an encrypted Amazon S3 bucket and provide analysts with decryption keys.

Answer

Use column-level encryption in the analytics database and grant analysts access to encrypted columns.

Answer

Implement row-level security (RLS) in the analytics database to filter PII based on user role.

Question 16

A healthcare analytics team wants to share a patient dataset with an external research partner for statistical modelling. The dataset contains direct identifiers such as full names, national ID numbers, and dates of birth. The privacy engineer must ensure that re-identification risk is minimized before sharing. Which technique should be applied FIRST to the dataset?

Accepted Answer

Suppress or generalize the direct identifiers and quasi-identifiers.. De-identification begins by removing or generalizing the attributes that make a record unique. Direct identifiers and quasi-identifiers must be transformed before any statistical disclosure control technique can be effective. Applying suppression or generalization first lowers the maximum re-identification risk and creates the conditions under which techniques such as k-anonymity, l-diversity, or differential privacy can be meaningfully applied to the shared dataset.

Answer

Add a random noise value to each numeric field in the dataset.

Answer

Hash the national ID numbers with a SHA-256 algorithm.

Answer

Apply format-preserving encryption to the direct identifiers.

Question 17

A privacy engineer is designing a data subject access request (DSAR) fulfillment pipeline that spans a primary PostgreSQL database, a data lake in Parquet format, and a search index. The engineer needs a technical mechanism that allows a single DSAR query to locate all records for a data subject across these heterogeneous stores without duplicating PII into a central repository. Which approach is MOST appropriate?

Accepted Answer

Implement a pseudonymous correlation identifier that is propagated to every store at ingestion time, and query each store by that identifier.. A pseudonymous correlation identifier propagated to each store at ingestion lets the DSAR pipeline query each system directly by a stable, non-PII key. This avoids creating a central PII copy, respects least privilege, and scales across heterogeneous stores. The mapping from the identifier back to the data subject remains in a controlled vault.

Answer

Consolidate all three stores into a single PostgreSQL instance so that a single SQL query can retrieve the data subject's records.

Answer

Build a central DSAR index that stores a copy of all PII from each store to enable fast lookups.

Answer

Require each store to expose a full-table scan API so the DSAR service can search for any PII pattern on demand.

Question 18

A privacy engineer is configuring a data retention schedule for a new cloud-based CRM that stores customer contact details and purchase history. The organization operates in multiple jurisdictions and must ensure that records are kept only for the period necessary for the stated business purpose, after which they are securely deleted. Which of the following should the engineer implement FIRST to align retention with the data life cycle management principle of storage limitation?

Accepted Answer

Define retention periods based on business purpose and legal requirements, then apply them via automated deletion rules in the CRM.. Storage limitation under data life cycle management requires that personal data be kept only as long as necessary for its purpose. The most effective first step is to define retention periods based on business and legal needs, then enforce them through automated deletion rules in the system of record. This ensures consistent, auditable disposal and directly operationalizes the principle across jurisdictions.

Answer

Implement field-level encryption for all PII fields and rotate encryption keys annually.

Answer

Create a manual process where data stewards review and delete records quarterly.

Answer

Enable automatic archiving of all CRM records to cold storage after 12 months.

Question 19

A multinational retailer is expanding its e-commerce operations into Brazil. The privacy team must determine whether the country's data protection authority can impose administrative fines directly on the company for privacy violations. Which legal framework should the CDPSE reference to assess this enforcement risk?

Accepted Answer

Lei Geral de Proteção de Dados (LGPD). The LGPD is Brazil's primary data protection law, and it grants the ANPD the power to investigate and sanction organizations for non-compliance. For a retailer expanding into Brazil, the LGPD is the correct framework to assess potential fines and enforcement actions. Other laws like GDPR or CCPA may have extraterritorial reach, but they do not govern Brazilian enforcement.

Answer

Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) System

Answer

General Data Protection Regulation (GDPR)

Answer

California Consumer Privacy Act (CCPA)

Question 20

A privacy engineer is configuring a new Amazon S3 bucket that will store customer transaction logs containing personal data. The organization's privacy policy requires that data be automatically deleted 90 days after creation to comply with data minimization principles. The engineer needs to implement this requirement with minimal operational overhead. Which solution should the engineer use?

Accepted Answer

Configure an S3 Lifecycle rule with an expiration action to delete objects 90 days after creation.. The correct solution is to use an S3 Lifecycle rule with an expiration action, which automatically deletes objects after 90 days. This enforces the retention policy natively, with minimal administrative effort and no custom code. Other options either retain data (versioning, Glacier transition) or require unnecessary custom development.

Answer

Enable S3 Versioning and configure a lifecycle rule to expire noncurrent versions after 90 days.

Answer

Use AWS Lambda to scan the bucket daily and delete objects older than 90 days.

Answer

Create an S3 Lifecycle rule to transition objects to S3 Glacier after 90 days.