CDPSE Practice Test 7 — 10 Questions

Question 1

When aligning privacy strategy with business objectives, what is the primary metric to demonstrate the value of a privacy program to stakeholders?

Accepted Answer

Reduction in privacy-related regulatory non-compliance fines.. Business value is best demonstrated through risk reduction and regulatory alignment.

Answer

Count of privacy training sessions completed.

Answer

Total spend on privacy software tools.

Answer

Number of privacy patches applied.

Question 2

Why is it important to have a defined data retention policy as part of privacy governance?

Accepted Answer

To comply with data minimization and reduce risk.. Data minimization is a key privacy principle; retaining data only as long as necessary reduces risk.

Answer

To satisfy customer requests for free gifts.

Answer

To save costs on hardware maintenance.

Answer

To increase storage space.

Question 3

Which THREE factors influence the maturity level of an organization's privacy governance?

Accepted Answer

The consistency of policy application across the enterprise.. Policy adoption, process automation, and monitoring depth define maturity.

Answer

The amount of office space rented.

Answer

The number of employees in the IT department.

Question 4

When evaluating a third-party vendor's privacy maturity, which document is most critical for the privacy practitioner to review during the due diligence process?

Accepted Answer

A SOC 2 Type II report or independent privacy audit report.. A SOC 2 Type II report or a dedicated privacy audit report provides independent verification of the vendor's privacy controls.

Answer

The vendor's public stock market performance.

Answer

The vendor's marketing brochure.

Answer

The vendor's internal organizational chart.

Question 5

Which of the following is an example of a physical privacy control?

Accepted Answer

Biometric server room entry. Securing the server room prevents unauthorized physical access to the hardware holding the data.

Answer

Disk encryption

Answer

Access logs

Answer

Data masking

Question 6

What does a 'Privacy-Enhancing Technology' (PET) primarily aim to achieve?

Accepted Answer

Minimizing or protecting personal data. PETs are tools that protect personal data by minimizing it, masking it, or providing mathematical privacy guarantees.

Answer

Increasing processing power

Answer

Improving network bandwidth

Answer

Reducing software bugs

Question 7

Which TWO technical controls are effective for limiting the scope of PII access in a cloud-based SQL environment?

Accepted Answer

Column-level security. Column-level security and Row-level security provide the most granular access control to prevent unauthorized PII visibility.

Answer

Public network access

Answer

Full database export

Answer

Verbose error logging

Question 8

Which THREE privacy engineering activities are performed during the 'Maintenance' phase of the system lifecycle?

Accepted Answer

Patching security vulnerabilities. Continuous monitoring, re-assessing impact, and updating security patches are critical during maintenance.

Answer

Initial design wireframing

Answer

Project budget estimation

Question 9

In the context of 'Privacy-Preserving Machine Learning', what is the purpose of the 'Membership Inference Attack' simulation during testing?

Accepted Answer

To identify if training data is leaked. This simulation tests if a model reveals whether a specific individual's data was used in the training set, exposing a potential privacy breach.

Answer

To optimize model accuracy

Answer

To improve training speed

Answer

To validate input quality

Question 10

A privacy engineer is implementing differential privacy in a data analytics pipeline. To ensure the privacy budget remains intact over multiple queries, which technique should be applied?

Accepted Answer

Utilizing composition theorems to track cumulative privacy loss. Composition theorems in differential privacy allow for the tracking of the cumulative privacy loss (epsilon) as multiple queries are performed on the same dataset.

Answer

Implementing k-anonymity on the original dataset

Answer

Increasing the sensitivity of the query function

Answer

Applying a fixed noise distribution regardless of query count