CDPSE Privacy Governance Practice Test 2 — 15 Questions

Question 1

Why is it important to have a defined data retention policy as part of privacy governance?

Accepted Answer

To comply with data minimization and reduce risk.. Data minimization is a key privacy principle; retaining data only as long as necessary reduces risk.

Answer

To satisfy customer requests for free gifts.

Answer

To save costs on hardware maintenance.

Answer

To increase storage space.

Question 2

Which governance tool is used to demonstrate 'Privacy by Default'?

Accepted Answer

A set of design specifications showing restrictive default settings.. Privacy by default means settings are set to the most restrictive option initially.

Answer

A firewall configuration report.

Answer

A customer feedback survey.

Answer

A list of employee names.

Question 3

What is the main purpose of a Privacy Impact Assessment (PIA) in the governance framework?

Accepted Answer

To identify and mitigate privacy risks early in the process.. PIAs identify and mitigate privacy risks before processing begins.

Answer

To calculate the financial costs of IT staff.

Answer

To increase the speed of product deployment.

Answer

To fulfill a mandatory public relations requirement.

Question 4

An organization is conducting a privacy maturity assessment. Which item represents the highest level of maturity in privacy policy development?

Accepted Answer

Policies that are embedded into automated workflows and continuously updated based on metrics.. Automated, dynamic policies that adapt to context represent the highest maturity level.

Answer

An annual policy review conducted by the legal team.

Answer

A static document published on the corporate intranet.

Answer

A policy signed by all employees once every five years.

Question 5

How can an organization ensure privacy is considered during the vendor procurement phase?

Accepted Answer

Including privacy and data security requirements in the RFP.. Embedding privacy requirements into the Request for Proposal (RFP) sets expectations early.

Answer

Hiring the vendor based solely on price.

Answer

Waiting until the contract is signed before asking for privacy details.

Answer

Allowing the vendor to provide their own privacy policy.

Question 6

What is the primary function of a privacy policy for external users?

Accepted Answer

To inform data subjects about the processing of their data.. Transparency is the main goal of external-facing privacy policies.

Answer

To prevent all data collection.

Answer

To list the names of all employees.

Answer

To act as a legal contract for system performance.

Question 7

Which of the following activities is essential for maintaining effective privacy governance over third-party processors?

Accepted Answer

Including mandatory privacy clauses in contracts and auditing compliance.. Due diligence and contractual clauses are critical for third-party risk management.

Answer

Only hiring large, well-known vendors.

Answer

Trusting the processor's own marketing brochures.

Answer

Giving the vendor full access to the corporate network.

Question 8

When implementing a privacy management system, what is the best approach to gain executive support?

Accepted Answer

Aligning privacy objectives with business value and risk management.. Business leaders care about risk, brand, and cost; framing privacy in these terms is the most effective approach.

Answer

Asking for unlimited funding for software tools.

Answer

Sending a list of all regulatory articles.

Answer

Threatening the board with fines.

Question 9

Which role is primarily responsible for ensuring that privacy policies are communicated effectively across the organization?

Accepted Answer

The Privacy Office or DPO.. The privacy leadership team (often the DPO) is responsible for internal communication and culture.

Answer

The janitorial staff.

Answer

The external auditors.

Answer

The IT helpdesk.

Question 10

An organization is building a privacy program. What indicates that the privacy strategy is aligned with business operations?

Accepted Answer

Privacy controls are integrated into business workflows.. Integration into daily processes is the highest indicator of operational alignment.

Answer

The privacy team has their own budget.

Answer

The policy is saved on a shared drive.

Answer

The DPO reports to the CEO once a year.

Question 11

What is the first step in conducting a privacy audit?

Accepted Answer

Defining the scope and objectives of the audit.. Defining the scope is critical to ensuring the audit focuses on the right areas.

Answer

Asking employees for their lunch preferences.

Answer

Buying new security software.

Answer

Writing the final audit report.

Question 12

When designing a privacy incident response plan, who should be the primary decision-maker for reporting a breach to a regulator?

Accepted Answer

The Data Protection Officer (DPO).. The DPO or legal counsel usually holds the authority to assess and report breaches.

Answer

The software vendor.

Answer

The office administrator.

Answer

The social media manager.

Question 13

Which TWO of the following are key components of a robust privacy governance framework?

Accepted Answer

Clear assignment of roles and responsibilities.. Accountability and transparent policies are foundational to any privacy framework.

Answer

A mandate to block all internet access.

Answer

The office floor plan.

Answer

A list of employee social media passwords.

Question 14

Which TWO of the following are common responsibilities of the privacy office?

Accepted Answer

Developing and delivering privacy training.. Privacy offices oversee compliance and drive training programs.

Answer

Setting the company's annual sales targets.

Answer

Writing code for the company website.

Answer

Repairing broken printers.

Question 15

Which TWO of the following are effective ways to measure the success of a privacy program?

Accepted Answer

Reduction in the number of privacy-related incidents.. Measuring compliance and incident trends provides objective success data.

Answer

The color of the office walls.

Answer

The number of coffee machines in the breakroom.

Answer

How many office chairs are purchased.