CDPSE Data Life Cycle Management Practice Test 5 — 15 Questions

Question 1

A privacy engineer is configuring a new Amazon S3 bucket that will store customer transaction logs containing personal data. The organization's privacy policy requires that data be automatically deleted 90 days after creation to comply with data minimization principles. The engineer needs to implement this requirement with minimal operational overhead. Which solution should the engineer use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure an S3 Lifecycle rule with an expiration action to delete objects 90 days after creation.. The correct solution is to use an S3 Lifecycle rule with an expiration action, which automatically deletes objects after 90 days. This enforces the retention policy natively, with minimal administrative effort and no custom code. Other options either retain data (versioning, Glacier transition) or require unnecessary custom development.

Answer

Enable S3 Versioning and configure a lifecycle rule to expire noncurrent versions after 90 days.

Answer

Use AWS Lambda to scan the bucket daily and delete objects older than 90 days.

Answer

Create an S3 Lifecycle rule to transition objects to S3 Glacier after 90 days.

Question 2

A multinational retailer is implementing a data minimization program for its customer loyalty database. The database contains fields such as full name, email, phone number, date of birth, and purchase history. The privacy team wants to reduce the amount of personal data stored while still enabling targeted marketing campaigns. Which of the following techniques BEST achieves data minimization while preserving analytical utility?

Accepted Answer

Aggregate purchase history into cohorts and delete individual-level identifiers after a short period.. Data minimization requires limiting personal data collection and retention to what is necessary for the stated purpose. Aggregating purchase history into cohorts and deleting individual identifiers reduces the volume of personal data while still enabling targeted marketing through cohort-level insights. This approach directly satisfies the minimization principle and supports storage limitation by removing identifiers when they are no longer needed for the business purpose.

Answer

Tokenize all PII fields and store the tokens in a separate vault.

Answer

Apply format-preserving encryption to all PII fields to reduce their sensitivity.

Answer

Implement role-based access controls so only marketing staff can view PII fields.

Question 3

A privacy analyst is reviewing the data life cycle for a new mobile app that collects location data. The analyst needs to ensure that location data is not retained longer than necessary for the app's core functionality. Which data life cycle stage directly addresses this requirement?

Accepted Answer

Data retention and disposal. The retention and disposal stage of the data life cycle is specifically designed to manage how long data is kept and to ensure its secure destruction when no longer needed. Collection, storage, and use stages address different aspects such as lawful acquisition, security, and processing purposes, but they do not enforce time limits on retention.

Answer

Data use

Answer

Data collection

Answer

Data storage

Question 4

A data privacy officer is reviewing the data life cycle for a new mobile application that collects precise geolocation data. The privacy policy states that geolocation data must be retained only for 30 days and then irreversibly anonymized for analytics. The engineering team proposes using a PostgreSQL database and asks for the most technically sound method to achieve irreversible anonymization of the geolocation data after 30 days while preserving its utility for aggregate analysis. Which approach should the privacy officer recommend?

Accepted Answer

Generalize the geolocation coordinates to a coarser grid (e.g., city-level) after 30 days and delete the original precise values.. Generalizing geolocation coordinates to a coarser grid and deleting the original precise values achieves irreversible anonymization while retaining utility for aggregate analysis. This method reduces data precision to a level where individuals cannot be re-identified, satisfying the privacy policy. Other options either leave data reversible or destroy its analytical value.

Answer

Apply a salted SHA-256 hash to the latitude and longitude values after 30 days.

Answer

Use PostgreSQL's built-in pgcrypto extension to encrypt the geolocation data with a symmetric key after 30 days.

Answer

Move the geolocation data to a separate table and restrict access to it after 30 days.

Question 5

A privacy analyst is reviewing the data life cycle for a mobile health application that collects user heart rate and location data. The company wants to ensure that data is properly disposed of when users delete their accounts. Which of the following is the MOST critical step to include in the disposal process to prevent residual data from remaining in backups and logs?

Accepted Answer

Implement a documented process that includes purging data from primary storage, backups, and logs, with verification.. Disposal must ensure that personal data is deleted from all repositories where it exists, including backups and logs. A documented process with verification provides assurance that no residual copies remain and supports auditability. Simply revoking access or sending a confirmation does not achieve deletion, and archiving prolongs retention, which conflicts with the user's request and storage limitation.

Answer

Revoke the user's access credentials and disable their account immediately.

Answer

Archive the user's data to a cold storage tier for potential future legal needs.

Answer

Send a confirmation email to the user that their account has been deleted.

Question 6

A healthcare provider is implementing a new patient portal. The privacy officer wants to ensure that when a patient requests correction of their data, the change is propagated to all downstream systems, including the billing and analytics platforms. Which data life cycle management practice is most critical to achieve this?

Accepted Answer

Data lineage tracking. Data lineage tracking is essential for propagating corrections because it documents the movement and transformation of data across systems. By understanding lineage, the healthcare provider can locate every copy of a patient's data and apply the correction consistently. Encryption, masking, and retention scheduling serve different purposes and do not provide the visibility needed to update all downstream instances.

Answer

Data encryption

Answer

Data masking

Answer

Data retention scheduling

Question 7

A multinational retailer stores customer purchase histories in Amazon S3 buckets across three AWS Regions. A new privacy policy mandates that personal data of EU residents must remain within the EU. The data engineering team wants a solution that automatically detects and prevents future cross-border storage of EU personal data without disrupting existing analytics workflows. Which AWS capability should be implemented to meet this requirement?

Accepted Answer

Configure AWS Organizations service control policies (SCPs) to deny S3 PutObject actions outside approved EU regions, and use Macie to classify EU personal data.. The requirement is to enforce that EU personal data is stored only within the EU. Service control policies in AWS Organizations can deny S3 write actions outside approved EU regions, providing a preventive control. Amazon Macie supplies the classification needed to identify EU personal data. Together they address both detection and prevention, ensuring residency without disrupting analytics in allowed regions. Other options either only restrict access or protect integrity, not location.

Answer

Enable S3 Block Public Access at the account level and configure bucket policies to deny requests from non-EU IP ranges.

Answer

Use Amazon Macie to discover and classify EU personal data, then apply S3 Object Lock in compliance mode to prevent deletion.

Answer

Enable S3 Cross-Region Replication with a replication rule that copies all objects to an EU bucket and deletes the source object after replication.

Question 8

A financial services company is designing a new data life cycle management policy. The privacy team wants to ensure that data quality is maintained throughout the life cycle, from collection to disposal. Which of the following practices BEST supports data quality during the storage and use phases?

Accepted Answer

Conduct periodic data accuracy audits and provide users with a self-service portal to correct their information.. Maintaining data quality during storage and use requires ongoing attention to accuracy. Periodic audits identify errors, and a self-service portal allows data subjects to correct their information, directly supporting accuracy and completeness. These practices align with privacy principles that require personal data to be accurate and up to date, and they are integral to a mature data life cycle management program.

Answer

Implement strict access controls so only authorized personnel can modify data.

Answer

Encrypt all personal data at rest using AES-256.

Answer

Archive data older than 12 months to a separate database to improve performance.

Question 9

A privacy program manager is designing a data retention schedule for a new SaaS application that processes employee HR data. The schedule must comply with GDPR and other privacy regulations. Which TWO of the following are essential considerations when determining retention periods for different data categories? (Choose two.)

Accepted Answer

The legal and regulatory requirements that mandate minimum or maximum retention periods for specific data types, such as tax records or health information.. Retention periods must be based on legal requirements and the purpose of processing. Legal mandates set minimum or maximum periods, while data minimization requires that data not be kept longer than necessary for the specified purpose. Together, these ensure compliance and respect for privacy principles. Technical capabilities and cost are secondary implementation factors.

Answer

The technical capabilities of the SaaS application to automatically enforce retention and deletion, such as built-in retention labels or policies.

Answer

The storage cost associated with retaining data in the SaaS application's cloud infrastructure, to optimize the IT budget.

Answer

The preferences of the employees whose data is being processed, as expressed through consent forms or surveys.

Question 10

A financial institution is building a data life cycle management program. The privacy team must ensure that personal data is properly governed from creation to disposal. Which two practices are essential for maintaining data quality and compliance throughout the life cycle? (Choose two.)

Accepted Answer

Implementing automated data classification at ingestion.. Automated classification at ingestion and regular data quality audits are foundational for governing data throughout its life cycle. Classification ensures policies are applied consistently from the start, while audits verify ongoing accuracy and compliance. Encryption, centralization, and uniform retention are either too narrow or potentially harmful, and do not address the breadth of life cycle governance.

Answer

Storing all data in a single centralized repository.

Answer

Applying the same retention period to all data types.

Answer

Encrypting all data at rest and in transit.

Question 11

A healthcare provider uses Microsoft 365 to manage patient records. A privacy officer requires that when a patient record reaches its retention period, it must be reviewed by a compliance officer before permanent deletion. Which Microsoft Purview feature should be configured to meet this requirement?

Accepted Answer

Retention labels with a disposition review at the end of the retention period.. The need is for a controlled disposition process where a human reviews records before deletion. Microsoft Purview retention labels support disposition review, which pauses deletion and routes items to a reviewer. This ensures compliance oversight and creates an audit trail. Retention policies delete automatically without review, sensitivity labels focus on encryption, and DLP blocks sharing, so none of those provide the required review step.

Answer

Sensitivity labels with encryption that prevents deletion by unauthorized users.

Answer

Retention policies that automatically delete items after the retention period without review.

Answer

Data loss prevention (DLP) policies that block deletion of patient records.

Question 12

A privacy analyst is reviewing the data life cycle for a new mobile application that collects user location data. The analyst must ensure that location data is not retained longer than necessary for the app's core functionality, which is providing real-time navigation. Which data life cycle stage is MOST directly concerned with limiting the retention period?

Accepted Answer

Data retention. The data retention stage is specifically about defining and enforcing how long data is kept. For location data in a navigation app, retention should be limited to the period needed for the service, after which disposal occurs. This stage directly implements the storage limitation principle by setting timeframes and triggers for deletion.

Answer

Data collection

Answer

Data storage

Answer

Data disposal

Question 13

A privacy program manager is reviewing the data life cycle for an organization that uses a hybrid cloud environment. The organization wants to ensure that data is properly managed from creation to deletion. Which TWO of the following activities are essential components of a data life cycle management program? (Choose two.)

Accepted Answer

Establishing data retention schedules that specify how long each data type must be kept.. Data life cycle management encompasses policies and procedures for managing data from creation to deletion. Retention schedules define how long data is kept and when it is disposed of, directly supporting storage limitation and disposal. Data classification categorizes data by sensitivity and value, enabling appropriate handling and protection at each phase. Together, these activities form the foundation of a structured life cycle program, while security tools and shared accounts are not core components.

Answer

Deploying a next-generation firewall to block unauthorized external access.

Answer

Using a single shared administrator account for all database management tasks.

Answer

Conducting annual penetration testing of all internet-facing applications.

Question 14

A privacy analyst is reviewing the data life cycle for a mobile fitness app that collects user location data. The analyst needs to identify the stage where data is initially collected from users. Which stage of the data life cycle does this represent?

Accepted Answer

Collection. The collection stage is where data is first obtained from users or other sources. In the fitness app, location data is gathered from user devices, marking the start of the data life cycle. This stage is essential for implementing privacy controls such as consent and notice, ensuring that data collection is lawful and transparent.

Answer

Processing

Answer

Disposal

Answer

Storage

Question 15

A privacy team is implementing data minimization for a cloud-based CRM system that stores customer PII. The team must ensure that only necessary data is collected and that data is not retained beyond its purpose. Which TWO of the following are technical controls that directly support data minimization? (Choose two.)

Accepted Answer

Automated data purging based on retention schedules configured in the CRM.. The two controls that directly support data minimization are automated data purging based on retention schedules and collection of only required fields with validation rules. Purging ensures data is not retained longer than necessary, while field validation ensures only necessary data is collected. Together, they reduce the volume and lifespan of PII, embodying minimization.

Answer

Data masking applied to PII fields when displayed in the CRM user interface.

Answer

Role-based access control (RBAC) restricting access to PII to authorized personnel.

Answer

Field-level encryption of all PII attributes in the CRM database.