CDPSE Practice Test 8 — 10 Questions

Question 1

A multinational retailer stores customer purchase histories in Amazon S3 buckets across three AWS Regions. A new privacy policy mandates that personal data of EU residents must remain within the EU. The data engineering team wants a solution that automatically detects and prevents future cross-border storage of EU personal data without disrupting existing analytics workflows. Which AWS capability should be implemented to meet this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure AWS Organizations service control policies (SCPs) to deny S3 PutObject actions outside approved EU regions, and use Macie to classify EU personal data.. The requirement is to enforce that EU personal data is stored only within the EU. Service control policies in AWS Organizations can deny S3 write actions outside approved EU regions, providing a preventive control. Amazon Macie supplies the classification needed to identify EU personal data. Together they address both detection and prevention, ensuring residency without disrupting analytics in allowed regions. Other options either only restrict access or protect integrity, not location.

Answer

Enable S3 Block Public Access at the account level and configure bucket policies to deny requests from non-EU IP ranges.

Answer

Use Amazon Macie to discover and classify EU personal data, then apply S3 Object Lock in compliance mode to prevent deletion.

Answer

Enable S3 Cross-Region Replication with a replication rule that copies all objects to an EU bucket and deletes the source object after replication.

Question 2

A CDPSE is reviewing a new employee monitoring system that tracks keystrokes and screenshots. The system will be deployed globally. Which privacy principle is most directly implicated by this monitoring?

Accepted Answer

Data minimization. Data minimization is most directly implicated because keystroke logging and screenshots collect extensive personal data that is likely disproportionate to the legitimate purpose of monitoring. GDPR requires that only necessary data be collected, making this principle central to assessing the system's compliance.

Answer

Storage limitation

Answer

Purpose limitation

Answer

Integrity and confidentiality

Question 3

A CDPSE is conducting a privacy risk assessment for a new mobile health app that collects sensitive health data. The app uses a third-party analytics SDK that transmits data to servers in a non-adequate country. The CDPSE must recommend controls to mitigate privacy risks. Which control is most effective in reducing the risk of unauthorized access during transmission?

Accepted Answer

Implementing end-to-end encryption for data in transit. End-to-end encryption is the most effective control to prevent unauthorized access to sensitive health data while in transit. It ensures confidentiality even if the data passes through third-party infrastructure or jurisdictions with weak privacy laws. Other options are important but do not directly secure the data transmission itself.

Answer

Obtaining user consent for data transfer

Answer

Conducting a vendor security assessment

Answer

Anonymizing the data before transmission

Question 4

A privacy engineer is reviewing a mobile application that transmits precise geolocation coordinates to a backend service every 30 seconds, even when the user is not actively using the app. The privacy notice states that location is collected only while the app is in use. Which engineering change BEST aligns the application's behaviour with the stated notice?

Accepted Answer

Gate location transmission on the app's foreground lifecycle state.. The privacy notice defines when and why location is collected. Gating transmission on the app's foreground lifecycle state enforces that boundary technically, so coordinates are sent only during active use. Reducing frequency, widening consent, or encrypting the payload leaves the unauthorized background collection in place, which is the core privacy defect the engineer must fix.

Answer

Encrypt the geolocation coordinates before transmission.

Answer

Obtain a broader consent that covers background location.

Answer

Increase the transmission interval to every 5 minutes.

Question 5

Which technique is most effective for minimizing PII in a non-production database environment while maintaining referential integrity?

Accepted Answer

Tokenization. Tokenization replaces PII with non-sensitive surrogate tokens while preserving the format and referential relationships via a secure token vault, so joins and foreign keys still work in non-production environments. It is the most effective technique for minimizing PII exposure while maintaining referential integrity because the same input value consistently maps to the same token, and the original data is not recoverable without vault access.

Answer

Full deletion

Answer

Masking with random noise

Answer

Hashing with a static salt

Question 6

You are integrating a homomorphic encryption library into a cloud-based financial system. What is the primary trade-off you must communicate to stakeholders regarding the implementation of Fully Homomorphic Encryption (FHE)?

Accepted Answer

Significant latency during computation. Fully Homomorphic Encryption (FHE) enables arbitrary computations on encrypted data, but the cryptographic operations are orders of magnitude slower than plaintext computations, causing significant latency. This latency is the primary trade-off that must be communicated to stakeholders, as it impacts system responsiveness and throughput. Other options like storage or integrity are not the main concerns.

Answer

Incompatibility with cloud storage

Answer

Increased storage requirements

Answer

Loss of data integrity

Question 7

A privacy engineer is reviewing a new marketing analytics tool that will process customer email addresses and purchase histories. The tool vendor proposes to store all data in a multi-tenant cloud database. Which privacy engineering control is most critical to implement to prevent cross-tenant data leakage?

Accepted Answer

Implement tenant isolation through separate database schemas or row-level security with tenant ID filtering.. Tenant isolation through separate schemas or row-level security is the most critical control to prevent cross-tenant data leakage. It enforces logical separation at the data layer, ensuring queries are scoped to the correct tenant. Encryption with a shared key, WAF, and auditing do not prevent logical leakage. Thus, tenant isolation is essential.

Answer

Enable database auditing to log all queries for later review.

Answer

Encrypt the database with a single encryption key managed by the vendor.

Answer

Use a web application firewall (WAF) to block SQL injection attacks.

Question 8

A CDPSE is designing the privacy risk register for a new mobile health application that continuously transmits heart-rate and sleep data to a cloud analytics platform. The organization wants to demonstrate that privacy risks are managed consistently with enterprise risk appetite. Which approach BEST integrates privacy risk into the existing enterprise risk management framework?

Accepted Answer

Map privacy risk scenarios to the enterprise likelihood and impact scales and assign owners through the existing risk governance process.. Integrating privacy risk into enterprise risk management requires using the organization's existing likelihood and impact scales, governance structures and ownership model. This enables privacy risks to be evaluated alongside other risks, prioritized consistently and managed within the same treatment and reporting cycles. A separate or purely legal approach fragments risk oversight and weakens accountability.

Answer

Use a qualitative heat map without numeric scores so that privacy risks are not compared against financial or operational risks.

Answer

Maintain a separate privacy risk register scored on a 1–5 scale defined by the privacy team and report it only to the chief privacy officer.

Answer

Treat all privacy risks as compliance issues and track them in the legal department's obligation register until they are closed.

Question 9

A privacy analyst is reviewing the data life cycle for a new mobile application that collects user location data. The analyst must ensure that location data is not retained longer than necessary for the app's core functionality, which is providing real-time navigation. Which data life cycle stage is MOST directly concerned with limiting the retention period?

Accepted Answer

Data retention. The data retention stage is specifically about defining and enforcing how long data is kept. For location data in a navigation app, retention should be limited to the period needed for the service, after which disposal occurs. This stage directly implements the storage limitation principle by setting timeframes and triggers for deletion.

Answer

Data collection

Answer

Data storage

Answer

Data disposal

Question 10

A privacy engineer is designing a data retention and deletion capability for a cloud-native application that stores personal data in an object storage bucket with versioning enabled and in a relational database with point-in-time recovery. The engineer must ensure that deletion requests are fully honored across both stores. Which TWO actions should the engineer take? (Choose two.)

Accepted Answer

Implement a deletion workflow that removes the data subject's rows and then expires the relevant database backups and snapshots according to a defined retention schedule.. Deletion in cloud-native stores must account for residual copies. Expiring non-current object versions with lifecycle rules removes the older copies that versioning retains, and a deletion workflow that also expires backups and snapshots removes the relational store's residual copies. Disabling recovery, enabling object lock, or relying on vacuum does not achieve complete deletion.

Answer

Disable point-in-time recovery on the relational database so that deleted rows cannot be restored.

Answer

Rely on the database's automatic vacuum process to remove deleted rows from all storage layers.

Answer

Enable object lock in governance mode on the bucket to prevent any deletion of personal data.