CDPSE Privacy Engineering Practice Test 3 — 15 Questions

Question 1

Which of the following is an example of an 'operational' technical control for privacy?

Accepted Answer

Data discovery scanning tools. Data discovery scanning tools are an operational technical control because they are automated technologies that continuously or periodically scan systems to locate, classify, and inventory personal data. They operate at the technical layer (agents, API connectors, pattern matching, ML classifiers) and are 'operational' in that they run as part of ongoing privacy operations rather than as one-time assessments or documentation. This makes them the only option that is simultaneously technical and operational.

Answer

Privacy policy document

Answer

Standard Operating Procedure

Answer

Privacy impact assessment

Question 2

A privacy engineer is auditing log data. Which action best aligns with data minimization requirements for logs?

Accepted Answer

Configuring log masking rules. Data minimization for logs means ensuring that log data does not contain more personal information than necessary for the stated purpose (e.g., security monitoring, troubleshooting). Configuring log masking rules removes or obfuscates sensitive fields such as passwords, tokens, and personal identifiers before they are written. This directly reduces privacy risk while preserving the operational value of logs.

Answer

Centralizing logs in a SIEM

Answer

Enabling full verbose logging

Answer

Setting a long retention policy

Question 3

You are troubleshooting a Federated Learning model. Privacy leakage is occurring during model updates. Which parameter should you adjust to improve privacy?

Accepted Answer

Implement secure aggregation. Secure aggregation is the correct answer because it is the specific privacy-enhancing mechanism designed to prevent the aggregation server from inspecting individual client model updates during federated learning. Instead of transmitting raw gradients, clients encrypt their updates so the server can only compute the sum across many participants, thereby preventing privacy leakage from any single update. Adjusting learning rate, batch size, or epochs changes model training dynamics but does not protect the privacy of the update payload itself.

Answer

Change the learning rate

Answer

Increase the batch size

Answer

Decrease the number of epochs

Question 4

An organization is using 'Bring Your Own Key' (BYOK) in their cloud environment. What is the primary privacy benefit?

Accepted Answer

Control over key lifecycle. BYOK (Bring Your Own Key) lets the customer generate, store, and control the lifecycle of encryption keys used by a cloud provider, rather than letting the provider manage them. The primary privacy benefit is control over key lifecycle — rotation, revocation, and destruction — which directly supports data sovereignty, regulatory compliance, and the ability to render data cryptographically inaccessible (crypto-shredding) when required.

Answer

Faster encryption processing

Answer

Improved data availability

Answer

Reduced storage costs

Question 5

Which component in an API gateway is used to ensure PII is not sent to third-party endpoints?

Accepted Answer

Request transformation policy. A request transformation policy in an API gateway rewrites or strips fields in the outbound request payload before it is forwarded to a third-party endpoint, which is exactly the mechanism used to prevent PII from leaving the trust boundary. Because the gateway sits inline between the consumer and the backend, it can inspect and mutate the request body/headers in flight, removing or masking sensitive attributes such as names, emails, or account numbers. This makes it the correct control for enforcing data minimization at the API layer.

Answer

Rate limiting

Answer

OAuth 2.0 validation

Answer

CORS policy

Question 6

You are implementing 'Privacy-Preserving Record Linkage' between two databases. What is the most effective approach?

Accepted Answer

Bloom filters. Bloom filters enable privacy-preserving record linkage by encoding each record's identifying attributes into a probabilistic bit array that supports set-membership testing without revealing the underlying values. Two parties can compare encoded records to find matches while the raw identifiers remain obscured, which is the core goal of PPRL. This makes Bloom filters the standard cryptographic construct used in PPRL protocols such as those based on garbled circuits or homomorphic encryption.

Answer

Centralized database merge

Answer

Manual data inspection

Answer

Cleartext matching

Question 7

Which of the following is an example of a physical privacy control?

Accepted Answer

Biometric server room entry. Biometric server room entry is a physical privacy control because it restricts physical access to areas where personal data is stored or processed, using biometric authentication to prevent unauthorized entry. Disk encryption, access logs, and data masking are logical or technical controls, not physical.

Answer

Disk encryption

Answer

Access logs

Answer

Data masking

Question 8

Which feature in an identity provider (IdP) supports privacy by limiting the scope of claims sent to a relying party?

Accepted Answer

OIDC Scopes. OIDC scopes define which claims (user attributes) an IdP releases to a relying party, so requesting only 'openid email' instead of 'openid profile email address phone' enforces data minimization at the token level. This directly supports privacy principles by limiting over-collection of identity data. Scopes are the standardized mechanism in the OIDC specification for consent-driven claim release.

Answer

Token refresh policy

Answer

Group membership mapping

Answer

Multi-factor authentication

Question 9

Which principle is represented by ensuring a user's data is only available to the specific application service that needs it?

Accepted Answer

Principle of least privilege. The principle of least privilege states that a user, process, or service should be granted only the minimum access rights necessary to perform its function. Restricting a user's data so that only the specific application service that needs it can access it is a direct application of least privilege — access is scoped to the narrowest set of consumers required. This limits exposure if other services or users are compromised.

Answer

Data segregation

Answer

Data portability

Answer

Data availability

Question 10

An organization wants to monitor data access patterns for potential privacy violations. Which tool is best for detecting unusual access to PII tables?

Accepted Answer

Database Activity Monitoring (DAM). Database Activity Monitoring (DAM) tools inspect and audit database traffic in real time, capturing who accessed which tables, when, and with what query — making them purpose-built for detecting unusual access to PII tables. DAM can baseline normal access patterns and alert on anomalies such as bulk SELECTs, off-hours access, or access by privileged users to sensitive tables. This directly addresses the requirement to monitor data access patterns for privacy violations.

Answer

Vulnerability assessment report

Answer

Network load balancer logs

Answer

Backup integrity check

Question 11

A system architect is using 'Zero Trust' network principles. How does this enhance privacy?

Accepted Answer

By verifying every access request. Zero Trust operates on the principle of 'never trust, always verify' — every access request, regardless of source or prior authentication, must be explicitly verified before access is granted. This continuous verification limits lateral movement and unauthorized data exposure, which directly supports privacy by ensuring only legitimate, authorized entities reach sensitive data. Encryption and centralization do not by themselves enforce access decisions at each request.

Answer

By encrypting all disk storage

Answer

By centralizing all user data

Answer

By preventing user account creation

Question 12

To prevent 're-identification' of an anonymized dataset, what process should be applied if the dataset is merged with external public data?

Accepted Answer

Linkage attack analysis. A linkage attack analysis specifically evaluates whether an anonymized dataset can be re-identified by joining it with external public data using shared quasi-identifiers such as ZIP code, birth date, or gender. It is the process designed to detect and mitigate re-identification risk before or after data merging. This directly addresses the scenario of combining anonymized data with external sources.

Answer

Data validation

Answer

Backup encryption

Answer

Database normalization

Question 13

When implementing Secure Multi-Party Computation (SMPC), what is the primary benefit?

Accepted Answer

Computation on private inputs. Secure Multi-Party Computation (SMPC) allows two or more parties to jointly compute a function over their private inputs without revealing those inputs to each other or to any third party. The primary benefit is therefore computation on private inputs — each party learns only the agreed-upon output, not the other parties' raw data. This enables collaborative analytics, fraud detection, or benchmarking across organizations that cannot legally or commercially share raw data.

Answer

No data movement required

Answer

Full public data visibility

Answer

High speed performance

Question 14

What is the primary function of a 'Data Protection Impact Assessment' (DPIA) from an engineering perspective?

Accepted Answer

To identify privacy risks in system design. A DPIA is a structured engineering and privacy assessment performed during system design to identify, evaluate, and mitigate privacy risks arising from processing personal data. From an engineering perspective, it functions as a design-time control that maps data flows, identifies where PII is collected/processed/stored, and flags risks such as excessive collection or weak safeguards before code is written. It is mandated under GDPR Article 35 for high-risk processing and is fundamentally a risk-identification exercise, not a security test or legal filing.

Answer

To test software security

Answer

To document legal agreements

Answer

To manage budget

Question 15

In the context of 'Privacy-Preserving Machine Learning', what is the purpose of the 'Membership Inference Attack' simulation during testing?

Accepted Answer

To identify if training data is leaked. A Membership Inference Attack (MIA) attempts to determine whether a specific individual's data was part of a model's training set. Simulating MIA during testing helps identify if the model leaks information about its training data, which is a privacy risk. The goal is not to improve model performance but to assess and mitigate privacy leakage.

Answer

To optimize model accuracy

Answer

To improve training speed

Answer

To validate input quality