CDPSE Data Life Cycle Management Practice Test 4 — 15 Questions

Question 1

Which TWO attributes are essential to include in a data mapping register for privacy compliance?

Accepted Answer

Purpose of processing. Option C (Purpose of processing) is essential because privacy regulations such as GDPR Article 5(1)(b) require purpose limitation, meaning each data element must be tied to a documented, legitimate processing purpose in the mapping register. Option E (Location of the data) is essential because it identifies where personal data resides and is transferred, which is needed to satisfy cross-border transfer rules (e.g., GDPR Chapter V, Schrems II) and to enforce data residency and access controls. Options A (Hardware serial number) and D (Operating system version) are asset-management details that do not describe personal data flows or processing rationale, and Option B (Daily electricity consumption) is unrelated operational data, so none of these belong in a privacy-focused data mapping register.

Answer

Hardware serial number

Answer

Daily electricity consumption

Answer

Operating system version

Question 2

Which TWO activities are involved in the 'data mapping' life cycle phase?

Accepted Answer

Documenting data flows. In the data mapping life cycle phase, the goal is to establish a complete picture of what data exists and how it moves through the organization, so option C (Documenting data flows) is correct because it captures the movement of data between systems, applications, and third parties, which is the core output of data mapping. Option D (Identifying data sources) is also correct because mapping must begin by locating where data originates and resides, such as databases, applications, and repositories, before flows can be traced. The unmarked options do not belong: purchasing new storage (A) is a procurement/infrastructure activity, hiring data privacy staff (B) is a resourcing/HR activity, and performing penetration tests (E) is a security testing activity, none of which constitute the data mapping phase itself.

Answer

Purchasing new storage

Answer

Hiring data privacy staff

Answer

Performing penetration tests

Question 3

Which TWO technical methods ensure data integrity during the life cycle?

Accepted Answer

Checksums. Checksums (A) are correct because they compute a fixed-size hash value from data blocks, allowing any accidental alteration during storage, transmission, or processing to be detected by recomputing and comparing the checksum, which directly preserves integrity across the data life cycle. Digital signatures (E) are correct because they use asymmetric cryptography to create a cryptographic binding between the data and the signer's private key, so any modification invalidates the signature and provides both integrity verification and authenticity. Load balancing (B) only distributes traffic across servers for availability and performance, not integrity. Data compression (C) reduces data size for storage or bandwidth efficiency and does not detect or prevent corruption. Data deduplication (D) eliminates redundant copies to save space and can even introduce integrity risks if not carefully managed, so it does not ensure integrity.

Answer

Load balancing

Answer

Data compression

Answer

Data deduplication

Question 4

Which THREE types of data are typically targeted for aggressive minimization?

Accepted Answer

Redundant, Obsolete, and Trivial (ROT) data. Option B is correct because ROT data (Redundant, Obsolete, and Trivial) has no ongoing business or legal value, so it is a prime candidate for aggressive minimization to reduce storage costs and breach exposure. Option D is correct because financial and payment information (e.g., cardholder data under PCI DSS) is highly sensitive and subject to strict retention limits, making it a frequent target for minimization. Option E is correct because PII is protected by privacy regulations such as GDPR and CCPA, which mandate data minimization and storage limitation, so organizations aggressively purge unneeded PII. Option A is not typically minimized aggressively because system logs for performance analysis are often retained for troubleshooting, capacity planning, and security monitoring. Option C is not a minimization target because publicly available documentation contains no sensitive or regulated data and poses little risk if retained.

Answer

System logs for performance analysis

Answer

Publicly available documentation

Question 5

Which THREE components should be included in a data inventory to ensure it is actionable for DSR (Data Subject Request) fulfillment?

Accepted Answer

Storage location. A is correct because knowing the storage location (the specific system, database, application, or repository where personal data resides) is essential for locating and retrieving or deleting data when fulfilling a DSR such as access or erasure. B is correct because identifying the data owner/steward provides the accountable contact who can validate the request, authorize actions, and coordinate retrieval or deletion across systems. E is correct because recording the data category/type (for example identifiers, financial data, health data, or special categories under GDPR) lets teams determine what is in scope, apply the right exemptions, and respond accurately to access, portability, or erasure requests. C is not relevant because server uptime percentage is an availability/operations metric that does not help locate or classify personal data for DSR fulfillment. D is also not relevant because network bandwidth usage is a performance/capacity metric unrelated to identifying, classifying, or acting on personal data in response to a DSR.

Answer

Server uptime percentage

Answer

Network bandwidth usage

Question 6

Which THREE tasks are associated with 'Data Classification' during the life cycle?

Accepted Answer

Identifying sensitive data elements. Data Classification during the life cycle involves identifying which data elements are sensitive (A), because you must first discover and recognize regulated or confidential data such as PII, PHI, or PCI before it can be protected. It also includes assigning classification labels (E), such as Public, Internal, Confidential, or Restricted, which formally tag each data element according to the organization's classification scheme. Once labels exist, applying policy controls based on those labels (C) is part of classification-driven protection, since controls like encryption, access restrictions, or DLP rules are enforced according to the assigned classification. Refreshing server hardware (B) is an infrastructure maintenance task unrelated to classifying data. Backing up the database (D) is a data availability and recovery activity, not a classification task, although backups may later inherit classification labels.

Answer

Refreshing the server hardware

Answer

Backing up the database

Question 7

Which TWO options represent common risks when data life cycle management is not implemented?

Accepted Answer

Regulatory non-compliance. Option C (Regulatory non-compliance) is correct because without a defined data life cycle management process, organizations cannot reliably enforce retention, deletion, and protection requirements mandated by regulations such as GDPR, HIPAA, or PCI DSS, leading to violations and penalties. Option D (Increased risk of data breach impact) is correct because unmanaged data tends to accumulate and persist beyond its useful life, expanding the attack surface and the volume of sensitive information exposed in a breach, thereby amplifying its impact. The remaining options do not belong: A (Decreased user account count) is unrelated to data life cycle management, B (Reduced network throughput) is a performance issue rather than a data governance risk, and E (Loss of software license keys) concerns asset/key management, not the life cycle of data itself.

Answer

Decreased user account count

Answer

Reduced network throughput

Answer

Loss of software license keys

Question 8

A hospital's privacy team discovers that backup tapes containing patient records are kept indefinitely because the backup software's retention policy was never configured. The tapes are stored offsite and are not indexed, making it impossible to locate individual records. Which action should the privacy team take FIRST to address this data life cycle risk?

Accepted Answer

Implement a documented retention schedule for backup media that aligns with the hospital's data retention policy and legal hold requirements, then apply it to the backup software.. The core failure is the lack of a defined retention period for backup media, which leads to indefinite storage of patient records. A documented retention schedule aligned with legal and operational requirements is the foundational control. Once established, it can be applied to the backup software to automate disposal, ensuring data is not kept longer than necessary and that legal holds are respected.

Answer

Immediately erase all offsite backup tapes to eliminate the risk of unauthorized access.

Answer

Encrypt the backup tapes and continue storing them indefinitely.

Answer

Create an index of the backup tapes so that individual records can be located for access requests.

Question 9

A multinational retailer is implementing a data life cycle management program. The privacy team must ensure that personal data collected in the EU is not retained longer than necessary and that disposal is verifiable. Which two controls are essential to meet these objectives? (Choose two.)

Accepted Answer

Define and enforce retention periods for each data category based on business, legal, and regulatory requirements.. To ensure data is not retained longer than necessary and that disposal is verifiable, the program must define and enforce retention periods and implement automated deletion with audit logs. Retention periods set the 'when' for disposal, while automated workflows with logging provide the 'how' and the evidence. Other controls like encryption or training are valuable but do not directly achieve these specific objectives.

Answer

Encrypt all personal data at rest using AES-256.

Answer

Conduct annual privacy training for all employees.

Answer

Store all personal data in a single centralized database to simplify management.

Question 10

A marketing team wants to use customer email addresses for a new promotional campaign. The privacy office determines that the original consent was limited to order fulfillment. What is the most appropriate action under data life cycle management principles?

Accepted Answer

Obtain fresh consent from customers for the marketing purpose before using their email addresses.. The original consent was limited to order fulfillment, so using the email addresses for marketing requires a new lawful basis. Obtaining fresh consent is the most appropriate action because it respects the data subject's choice and complies with purpose limitation. Other options either ignore consent requirements or fail to achieve the marketing objective, making them unsuitable.

Answer

Use the email addresses for the campaign because the data is already collected and stored.

Answer

Proceed with the campaign but include an opt-out link in every email.

Answer

Anonymize the email addresses and then use them for the campaign.

Question 11

A data privacy team is designing a new customer analytics platform. They need to ensure that raw personal data collected for marketing purposes cannot be repurposed for a different incompatible purpose without explicit consent. Which data life cycle management control best enforces this requirement at the point of collection?

Accepted Answer

Purpose limitation tagging applied to data assets at ingestion.. Purpose limitation requires that data collected for one purpose not be used for another incompatible purpose without a lawful basis. Tagging assets with purpose metadata at ingestion embeds that restriction into the data life cycle, enabling automated policy enforcement downstream. Masking, encryption, and retention schedules address different privacy principles and do not prevent repurposing by authorized users.

Answer

Data masking applied to all personal data before storage.

Answer

Retention schedule applied to the marketing database.

Answer

Encryption at rest for the analytics data store.

Question 12

A privacy engineer is configuring a data retention schedule for a new cloud-based CRM that stores customer contact details and purchase history. The organization operates in multiple jurisdictions and must ensure that records are kept only for the period necessary for the stated business purpose, after which they are securely deleted. Which of the following should the engineer implement FIRST to align retention with the data life cycle management principle of storage limitation?

Accepted Answer

Define retention periods based on business purpose and legal requirements, then apply them via automated deletion rules in the CRM.. Storage limitation under data life cycle management requires that personal data be kept only as long as necessary for its purpose. The most effective first step is to define retention periods based on business and legal needs, then enforce them through automated deletion rules in the system of record. This ensures consistent, auditable disposal and directly operationalizes the principle across jurisdictions.

Answer

Implement field-level encryption for all PII fields and rotate encryption keys annually.

Answer

Create a manual process where data stewards review and delete records quarterly.

Answer

Enable automatic archiving of all CRM records to cold storage after 12 months.

Question 13

A multinational retailer must comply with a data subject's erasure request that spans its on-premises Oracle database, a SaaS CRM, and backups. The privacy team wants to ensure the erasure is technically enforced and auditable across all environments. Which approach best meets this requirement?

Accepted Answer

Implement a centralized erasure orchestration tool that propagates deletion requests to all systems and logs each action.. Erasure across diverse systems demands a coordinated approach that can enforce deletion in each environment and produce auditable evidence. A centralized orchestration tool provides the necessary reach and logging, while manual deletion and passive backup expiration leave gaps. Anonymization and cryptographic erasure are alternatives but require strict conditions that are hard to meet across on-premises, SaaS, and backups.

Answer

Encrypt the customer record with a key that is deleted upon request, rendering the data unreadable.

Answer

Anonymize the customer record in all systems so it can no longer be linked to the individual.

Answer

Delete the customer record from the production Oracle database and the SaaS CRM, and rely on backup expiration.

Question 14

A privacy engineer is implementing a data minimization strategy for a microservices application deployed on Kubernetes. The application processes customer payment data in ephemeral pods. The engineer must ensure that sensitive data is not persisted beyond the processing window and that any residual data in the container filesystem is securely removed. Which approach BEST achieves this?

Accepted Answer

Configure the pods to use an emptyDir volume with medium: Memory and ensure the application writes sensitive data only to that volume.. The correct approach uses an emptyDir volume with medium: Memory, which stores data in RAM and automatically deletes it when the pod terminates. This ensures that sensitive payment data is not written to persistent storage and is securely removed upon pod deletion, satisfying data minimization and disposal requirements. Other options involve persistent storage or insecure mechanisms that leave residual data.

Answer

Mount a hostPath volume to a dedicated directory on the node and apply a cron job to delete files older than one hour.

Answer

Use a PersistentVolume with a StorageClass that supports encryption at rest and set the reclaim policy to Delete.

Answer

Store sensitive data in a ConfigMap and mount it as a volume, then delete the ConfigMap after processing.

Question 15

A privacy engineer is configuring an automated data disposal process for a cloud-based CRM. The organization must ensure that when a customer account is deleted, all associated personal data is irreversibly destroyed across all replicas and backups within 30 days, while maintaining an audit trail. Which approach best satisfies these requirements?

Accepted Answer

Implement a cryptographic erasure strategy by destroying the encryption keys associated with each customer's data, and log the key destruction event.. Cryptographic erasure is a recognized method for secure data disposal in cloud environments, as it eliminates the need to track every data copy. By destroying the encryption keys, all encrypted data becomes inaccessible, and the key destruction event provides an auditable record. This approach aligns with the requirement for irreversible destruction within 30 days across replicas and backups.

Answer

Archive the customer data to a cold storage tier and set a lifecycle policy to delete it after 30 days, while enabling versioning for audit.

Answer

Run a database DELETE command on all customer records and rely on the database's transaction log to purge backups automatically.

Answer

Overwrite the storage blocks containing the customer data with random patterns using a secure wipe tool, and document the overwrite in a spreadsheet.