A privacy engineer is implementing differential privacy on a dataset using Google Cloud's Differential Privacy library. Which THREE configuration steps are critical for minimizing re-identification risk?
In AWS Glue, a developer needs to ensure that sensitive columns are automatically identified and redacted during ETL jobs. Which component is best suited for this?
A privacy engineer is configuring a new AWS S3 bucket to store sensitive customer data. Which configuration ensures the highest level of privacy by design through encryption at rest using customer-managed keys?
You are configuring AWS Macie to identify PII in an S3 bucket. Which setting must be enabled to ensure that specific sensitive data patterns are detected across all files regardless of their object tags?
A privacy engineer is designing a data anonymization pipeline for a healthcare dataset. The dataset contains patient identifiers, demographics, and medical diagnoses. The goal is to release the data for research while preventing re-identification. Which technique should the engineer implement to protect against linkage attacks while preserving data utility for statistical analysis?
A privacy engineer is configuring a web application to comply with the principle of data minimization. The application collects user data for a newsletter subscription. Which design change best implements data minimization?
A privacy engineer is evaluating a cloud-based customer analytics platform that processes personal data across multiple regions. The platform uses a shared responsibility model. Which two actions should the engineer take to ensure privacy compliance in the cloud environment? (Choose two.)
A privacy engineer is configuring a database that stores customer personal data. The engineer must ensure that data is protected in the event of a physical disk theft. Which control is most appropriate?
A privacy engineer is designing a system to support the GDPR right to data portability. The system must allow users to export their data in a structured, commonly used, and machine-readable format. Which two technical requirements must be met to ensure the export is both interoperable and secure? (Choose two.)
A privacy engineer is configuring Azure Data Factory to ensure PII is masked during integration. Which feature should be configured to apply dynamic data masking on SQL targets?
A practitioner is deploying a Google Cloud Storage bucket. To ensure that files containing PII are automatically redacted before being accessed by external users, which Cloud DLP action should be integrated?
In a Google Cloud environment, you need to implement a policy to automatically redact PII from documents uploaded to Cloud Storage. Which service should be integrated?
A privacy engineer is configuring Azure SQL Database to ensure that sensitive columns containing PII are hidden from non-privileged users. Which feature should be implemented to achieve dynamic data masking?
You are designing a system for k-anonymity. If a dataset has an identifier that is unique to every row, what is the first step you must take before applying generalization?
A company needs to share customer demographics with a third party. Which technique allows for statistical analysis without revealing individual identities?
You are troubleshooting a Federated Learning model. Privacy leakage is occurring during model updates. Which parameter should you adjust to improve privacy?
A privacy engineer is implementing differential privacy in a data analytics pipeline. To ensure the privacy budget remains intact over multiple queries, which technique should be applied?
When pseudonymizing a database using SHA-256 hashing, what is the most critical requirement to prevent re-identification via brute-force or dictionary attacks?
A web application stores user logs in a cleartext format. To implement 'Privacy by Design', which technical control is the most appropriate first step to minimize data exposure?
You are integrating a homomorphic encryption library into a cloud-based financial system. What is the primary trade-off you must communicate to stakeholders regarding the implementation of Fully Homomorphic Encryption (FHE)?
Which feature in Microsoft Purview Information Protection should be used to automatically identify and classify documents containing credit card numbers as they are created?
A privacy engineer is implementing 'Tokenization' for credit card processing. Where should the 'vault' be situated to ensure the highest level of privacy?
Which of the following is the most effective technical control for implementing the 'Right to be Forgotten' in a distributed microservices environment?
A privacy engineer is reviewing a 'consent management platform' (CMP). Which configuration is necessary to ensure compliance with a user's choice to 'opt-out' of data sharing?
A privacy engineer is designing a system that stores user date-of-birth values in a database. The business requirement is to support age-band analytics (e.g., 18-24, 25-34) without ever exposing the exact birth date to the analytics team. Which privacy engineering technique should be implemented to meet this requirement?
A privacy engineer is implementing a consent management platform for a mobile application. The platform must capture, store, and enforce user consent preferences across multiple microservices. Which two actions should the engineer take to ensure consent is technically enforceable and auditable? (Choose two.)
A privacy engineer is designing a customer analytics platform that ingests data from multiple sources. The platform will use Apache Kafka to stream events. To support the principle of data minimization, the engineer wants to ensure that only the fields necessary for analytics are persisted in the data lake. Which Kafka feature should be used to transform and filter records before they are written to the sink?
A privacy engineer is configuring a data retention policy for a system that processes customer personal data. The policy must automatically delete data after its retention period expires. Which technical control best ensures that personal data is not retained beyond its defined lifecycle?
A privacy engineer is evaluating a new third-party API that will process personal data. The API requires sending data over the internet. To ensure privacy during transmission, which technical control should be implemented to protect the data in transit?
A privacy engineer is working with a data science team that wants to use a production customer database for developing a churn prediction model. The database contains names, email addresses, and purchase histories. The team proposes to replace names and email addresses with random identifiers and store the mapping in a separate table. Which privacy engineering technique is being applied?
A privacy engineer is designing a new mobile health application that will collect continuous heart rate data from wearable sensors. The application must comply with GDPR and the organization's privacy policy, which mandates data minimization and purpose limitation. The engineer proposes storing raw sensor data indefinitely to support future research. Which action should the engineer take to align with privacy engineering principles?
A privacy engineer is implementing a data retention policy for a customer relationship management (CRM) system. The policy requires that customer records be retained for exactly 7 years and then automatically deleted. The CRM vendor offers a built-in retention feature that soft-deletes records after the period, but the records remain recoverable for 30 days. Which action should the engineer take to ensure compliance with the retention policy?
A privacy engineer is implementing a data anonymization pipeline for a dataset containing user records. The goal is to prevent re-identification while maintaining data utility for analytics. Which two techniques should be applied to achieve this? (Choose two.)
A privacy engineer is designing a new customer analytics platform that will process personal data from multiple sources. The platform must support the GDPR right to erasure. Which two technical measures should be implemented to ensure erasure requests can be fulfilled effectively? (Choose two.)
A privacy engineer is implementing a data subject access request (DSAR) system for a multinational corporation. The system must retrieve all personal data for a given user across a microservices architecture. The engineer proposes using a centralized data lake that ingests all personal data from various services in near real-time. Which concern is most critical from a privacy engineering perspective?
A privacy engineer is configuring a database that stores personal data. To support the principle of access control, the engineer needs to ensure that users can only access data necessary for their role. Which database feature should be used to restrict access at the row level based on user attributes?
A privacy engineer is reviewing a new mobile application that collects location data. The app currently requests access to the device's precise location every time it is opened, even when the user is not actively using the app. Which privacy engineering principle is being violated?
A privacy engineer is designing a system that processes biometric data for access control. The system uses a fingerprint scanner that converts the fingerprint into a mathematical template. The engineer must ensure that the original fingerprint cannot be reconstructed from the stored template. Which technique should be implemented?
A privacy engineer at a health-tech company is designing a new patient portal. The portal must allow patients to view their own records but must prevent them from inferring information about other patients through aggregate queries. Which technical control should be implemented to meet this requirement?
A privacy engineer is implementing a consent management platform (CMP) for a website that uses cookies and similar tracking technologies. The CMP must comply with GDPR and ePrivacy Directive. Which TWO features are essential for the CMP to ensure valid consent? (Choose two.)
A privacy engineer is implementing a data retention policy for a cloud-based SaaS application. The policy requires that customer data be deleted after 30 days of account inactivity. The application uses a multi-tenant database where each tenant's data is logically separated but stored in the same physical tables. Which technical approach best ensures that the retention policy is enforced without affecting other tenants?
A multinational e-commerce company is implementing a privacy-preserving data analytics pipeline. The pipeline ingests customer behavior events from web and mobile apps, and analysts need to query the data without accessing raw PII. The company wants to ensure that even if the analytics environment is compromised, raw PII remains protected. Which approach best achieves this?
A healthcare analytics team wants to share a patient dataset with an external research partner for statistical modelling. The dataset contains direct identifiers such as full names, national ID numbers, and dates of birth. The privacy engineer must ensure that re-identification risk is minimized before sharing. Which technique should be applied FIRST to the dataset?
A privacy engineer is configuring an Apache Kafka cluster that ingests customer transaction events for downstream analytics. The events include personally identifiable information (PII). The engineer must ensure that PII is irreversibly transformed before it is written to the topic while allowing downstream consumers to still join events by a stable customer identifier. Which approach BEST satisfies this requirement?
A privacy engineer is selecting a cloud service provider (CSP) for storing sensitive personal data. The organization requires that data be encrypted at rest and that the organization retain control over encryption keys. Which CSP feature best meets this requirement?
A financial services firm is implementing a new mobile banking app. The privacy engineer must ensure that data collected from the app is minimized and that users can easily withdraw consent. Which design pattern best supports these requirements?
A financial services firm is deploying a new customer onboarding portal that collects income, employment, and identity documents. The privacy engineer must embed privacy controls into the software development lifecycle. Which engineering practice BEST ensures privacy requirements are validated before production release?
A privacy engineer is designing a data subject access request (DSAR) fulfillment pipeline that spans a primary PostgreSQL database, a data lake in Parquet format, and a search index. The engineer needs a technical mechanism that allows a single DSAR query to locate all records for a data subject across these heterogeneous stores without duplicating PII into a central repository. Which approach is MOST appropriate?
A privacy engineer is implementing a consent management system for a mobile application. The app collects location data for personalized recommendations. Users must be able to withdraw consent at any time, and the app must stop processing location data immediately upon withdrawal. Which technical design best meets these requirements?
A privacy engineer is configuring a data retention policy for a marketing analytics platform. The policy states that raw event data containing device identifiers must be deleted after 90 days, while aggregated campaign metrics may be retained indefinitely. Which mechanism should be implemented to enforce this policy automatically?
A privacy engineer is reviewing a mobile application that collects precise GPS coordinates every 30 seconds, even when the user is not actively using the app. The product team wants to reduce privacy risk while preserving the app's core feature of showing nearby points of interest. Which change BEST aligns with the principle of data minimization?
A privacy engineer is reviewing a mobile application that transmits precise geolocation coordinates to a backend service every 30 seconds, even when the user is not actively using the app. The privacy notice states that location is collected only while the app is in use. Which engineering change BEST aligns the application's behaviour with the stated notice?
A privacy engineer is implementing a consent management platform (CMP) for a website that uses cookies for analytics, advertising, and essential functions. The CMP must ensure that non-essential cookies are not set before the user grants consent, and that the user's choice is honored on subsequent visits. Which technical design BEST meets these requirements?
A privacy engineer is designing a data processing pipeline that ingests customer records from multiple source systems into a centralized analytics environment. The design must enforce data minimization and purpose limitation. Which TWO engineering controls should be implemented? (Choose two.)
A privacy engineer is reviewing a new marketing analytics tool that will process customer email addresses and purchase histories. The tool vendor proposes to store all data in a multi-tenant cloud database. Which privacy engineering control is most critical to implement to prevent cross-tenant data leakage?
A privacy engineer is designing a data retention and deletion capability for a cloud-native application that stores personal data in an object storage bucket with versioning enabled and in a relational database with point-in-time recovery. The engineer must ensure that deletion requests are fully honored across both stores. Which TWO actions should the engineer take? (Choose two.)
A privacy engineer is building a data-sharing portal that lets external research partners query a customer database through a restricted SQL view. The requirement is that partners can only see aggregated counts and must never be able to re-identify an individual, even by combining multiple queries. Which control should the engineer implement to enforce this directly at the database layer?
A privacy engineer is deploying a new analytics platform that ingests event streams containing user identifiers. The business wants to correlate events across sessions but must ensure that if the pseudonymization key is compromised, past data cannot be re-linked to identities. Which design best meets this requirement?
A privacy engineer is reviewing a new customer relationship management deployment. The legal team requires that the system support data subject access requests, including the ability to produce a complete record of a customer's personal data and its processing history. Which capability is most directly required to satisfy this?
A privacy engineer is implementing a Privacy Enhancing Technology (PET) evaluation framework for a new data collaboration project. The project involves sharing sensitive datasets with partners while preserving analytical utility. Which TWO properties should the framework require to be demonstrated before approving a PET for deployment? (Choose two.)
A privacy engineer is designing a system that processes biometric templates for access control. The system must allow matching without ever storing a reversible form of the biometric. Which approach best meets this requirement?