CDPSE Data Life Cycle Management Practice Test 3 — 15 Questions

Question 1

In a data warehouse, which technique is most effective for protecting PII during the ETL (Extract, Transform, Load) process while still allowing analytics?

Accepted Answer

Masking the data during the transformation phase. Data masking during the transformation phase (ETL) allows analytical tools to process the records without seeing the actual PII.

Answer

Using access control lists at the reporting layer

Answer

Deleting the data during extraction

Answer

Encrypting the entire database

Question 2

When classifying data for privacy, what does a 'Restricted' label usually signify?

Accepted Answer

Data requiring limited access and enhanced protection. Restricted data is highly sensitive and requires strict access controls and specific handling to prevent unauthorized access.

Answer

Data that can be shared publicly

Answer

Data that has no retention period

Answer

Data that is no longer needed

Question 3

Which TWO methods are commonly used to achieve data minimization in a legacy database?

Accepted Answer

Anonymization of records. Anonymization and data purging are direct methods to reduce the footprint of sensitive data.

Answer

Mirroring the database

Answer

Implementing multi-factor authentication

Answer

Increasing database indexing

Question 4

Which TWO outcomes result from effective data classification?

Accepted Answer

Improved application of security controls. Classification enables targeted security controls and informs retention requirements.

Answer

Increased server processing speed

Answer

Reduction in data volume

Answer

Improved user interface design

Question 5

Which THREE factors should be considered when defining a data retention schedule?

Accepted Answer

Regulatory/Legal requirements. Legal requirements, business utility, and statutory limitations are the core drivers of any retention policy.

Answer

The number of concurrent users

Answer

Storage server hardware cost

Question 6

Which TWO metrics are used to measure the effectiveness of data minimization?

Accepted Answer

Reduction in overall data volume. Reduction in total storage and the volume of PII-containing records are standard minimization metrics.

Answer

Database query response time

Answer

Increase in storage capacity

Answer

User satisfaction scores

Question 7

Which THREE actions are part of a secure data disposal process?

Accepted Answer

Verification of destruction. Verification, documentation, and technical wiping are essential for compliant disposal.

Answer

Moving data to cold storage

Answer

Renaming files

Question 8

Which TWO of the following are primary pillars of the Data Life Cycle Management?

Accepted Answer

Data Disposal. Data collection and disposal are two critical phases in the lifecycle that require specific privacy controls.

Answer

Marketing Strategy

Answer

Application Maintenance

Answer

Network Security

Question 9

Which THREE techniques effectively protect data during the 'use' phase of the life cycle?

Accepted Answer

Pseudonymization. Encryption, masking, and pseudonymization are standard techniques for protecting data during active processing.

Answer

Data replication

Answer

Data compression

Question 10

Which TWO attributes are essential to include in a data mapping register for privacy compliance?

Accepted Answer

Purpose of processing. Knowing the purpose (why) and the location (where) is foundational for privacy accountability.

Answer

Hardware serial number

Answer

Daily electricity consumption

Answer

Operating system version

Question 11

Which TWO activities are involved in the 'data mapping' life cycle phase?

Accepted Answer

Documenting data flows. Identifying data sources and defining data flows are core to mapping.

Answer

Purchasing new storage

Answer

Hiring data privacy staff

Answer

Performing penetration tests

Question 12

Which TWO technical methods ensure data integrity during the life cycle?

Accepted Answer

Checksums. Checksums and digital signatures ensure that data has not been tampered with or corrupted.

Answer

Load balancing

Answer

Data compression

Answer

Data deduplication

Question 13

Which THREE types of data are typically targeted for aggressive minimization?

Accepted Answer

Redundant, Obsolete, and Trivial (ROT) data. PII, sensitive financial data, and redundant/outdated data are the primary targets for minimization.

Answer

System logs for performance analysis

Answer

Publicly available documentation

Question 14

Which THREE components should be included in a data inventory to ensure it is actionable for DSR (Data Subject Request) fulfillment?

Accepted Answer

Storage location. To fulfill a DSR, you must know what the data is, who owns it, and where it resides.

Answer

Server uptime percentage

Answer

Network bandwidth usage

Question 15

Which THREE tasks are associated with 'Data Classification' during the life cycle?

Accepted Answer

Identifying sensitive data elements. Identifying data, assigning a label, and applying specific policy rules are the steps in classification.

Answer

Refreshing the server hardware

Answer

Backing up the database