CDPSE Data Life Cycle Management Practice Test 2 — 15 Questions

Question 1

When using IBM InfoSphere Information Governance Catalog to map sensitive data, what is the primary purpose of a 'Data Class'?

Accepted Answer

To identify and classify sensitive data patterns. Data classes define the structure of data (e.g., Credit Card Number) to allow automated identification in the catalog.

Answer

To store physical data

Answer

To manage retention policies

Answer

To define user access

Question 2

In the privacy lifecycle, what does the term 'Data Collection' primarily involve?

Accepted Answer

Obtaining and recording personal data from the subject. Data collection is the entry point where PII is gathered from subjects, requiring notice and consent.

Answer

Destroying records

Answer

Backing up data

Answer

Encrypting data in transit

Question 3

When using Talend Data Fabric for data life cycle management, what is the function of the 'Data Stewardship' component?

Accepted Answer

To allow manual intervention in data processing. It provides a platform for data stewards to manually review and remediate data that failed quality or privacy checks.

Answer

To create data maps

Answer

To automate deletion

Answer

To encrypt data

Question 4

In Snowflake, what is the effect of using a 'Dynamic Data Masking' policy on a column containing PII when a non-authorized user runs a SELECT query?

Accepted Answer

The data is returned in a masked format. The dynamic masking policy replaces the real data with a redacted version (e.g., NULL or XXX) at query time without altering the underlying storage.

Answer

The entire row is suppressed

Answer

The query fails due to lack of access

Answer

The data is decrypted before display

Question 5

When using Varonis to identify 'stale' data for minimization, what criteria must be defined to avoid false positives?

Accepted Answer

Last Accessed Date. Varonis requires defining the 'Last Accessed' timeframe to distinguish between actively used data and candidates for deletion.

Answer

File size threshold

Answer

File extension

Answer

User account status

Question 6

A practitioner is setting up data minimization. Which feature in Google Cloud Spanner helps ensure that data is stored in specific regions for local compliance?

Accepted Answer

Placement Policies. Spanner uses 'Placement Policies' (or node configurations) to dictate where data is stored, supporting data residency compliance.

Answer

Encryption at Rest

Answer

Access Control Lists

Answer

Backup Retention

Answer

Schema Validation

Question 7

You are using AWS Macie to perform a classification scan. Which feature should be configured to notify the privacy team when sensitive data is found?

Accepted Answer

EventBridge Rule. Macie triggers 'EventBridge' alerts that can be routed to notification services like SNS.

Answer

IAM User Permission

Answer

CloudTrail Log

Answer

S3 Policy

Question 8

When managing data retention in Azure Data Lake Storage (ADLS) Gen2, how do you implement a policy that deletes files older than 7 years?

Accepted Answer

Configure a Lifecycle Management policy rule. Lifecycle management policies in ADLS allow you to define rules to delete blobs based on the number of days since last modification.

Answer

Apply a Data Loss Prevention policy

Answer

Create a Power Automate flow to scan the lake

Answer

Use Azure Data Factory to trigger a DELETE SQL query

Answer

Set the 'Delete' flag on the container

Question 9

In the context of the data lifecycle, what is the primary benefit of using a 'Data Catalog' tool like Alation?

Accepted Answer

To provide centralized visibility of data location and use. A data catalog provides visibility into data lineage and ownership, which is crucial for lifecycle management.

Answer

To provide physical security

Answer

To perform automated data deletion

Answer

To encrypt sensitive files

Question 10

When conducting a Privacy Impact Assessment (PIA) for a new application, what is the role of 'Data Mapping'?

Accepted Answer

To define the flow of PII throughout the application. Data mapping identifies the flow and storage locations, which is the foundation for conducting a meaningful PIA.

Answer

To provide encryption keys

Answer

To automate user consent

Answer

To purge old data records

Question 11

Which of the following is a key objective of a data retention policy?

Accepted Answer

To minimize the amount of data stored and reduce risk. The primary objective is to maintain data only as long as necessary for business or legal reasons, supporting minimization.

Answer

To maximize data availability

Answer

To increase storage capacity requirements

Answer

To keep all data forever for future AI training

Question 12

When configuring a 'Data Disposal' process, why is it critical to verify the 'Chain of Custody'?

Accepted Answer

To verify the data was deleted securely. Chain of custody ensures that data was tracked throughout its existence until secure destruction, providing evidence for compliance.

Answer

To ensure the database is faster

Answer

To identify who shared the data

Answer

To increase storage space

Question 13

In MongoDB, what is the most effective way to ensure data minimization regarding personally identifiable information?

Accepted Answer

Dropping unused fields from the document schema. Using 'Field Level Encryption' (FLE) ensures that only authorized processes see the data, and dropping unused fields from the collection schema reduces storage of unnecessary data.

Answer

Increasing the backup frequency

Answer

Adding more nodes to the cluster

Answer

Indexing all fields

Question 14

You are managing data in a Kubernetes environment. What strategy should be used to support data minimization for ephemeral pods?

Accepted Answer

Use emptyDir for ephemeral storage. Using temporary storage volumes (emptyDir) ensures that data is deleted automatically when the pod is terminated.

Answer

Always use Persistent Volumes

Answer

Enable persistent logging

Answer

Configure snapshots for all pods

Question 15

What is the primary function of a 'Data Inventory' in a privacy program?

Accepted Answer

To record the location, purpose, and sensitivity of personal data. A data inventory acts as the master record of what data exists, where it is, and who owns it, serving as the basis for all life cycle activities.

Answer

To automatically encrypt files

Answer

To manage physical server hardware

Answer

To perform user authentication