ISACA Certified Data Privacy Solutions Engineer (CDPSE) (CDPSE) CDPSE Questions 151–215 | Page 3/3

151

MCQmedium

To ensure that data access logs cannot be tampered with by an administrator with high privileges, which technical control should be implemented?

A.Role-Based Access Control (RBAC)

B.Database encryption at rest

C.Immutable log storage

D.Multi-factor authentication (MFA)

AnswerC

Immutable storage prevents modification or deletion of existing audit records.

Why this answer

Write-Once-Read-Many (WORM) storage or immutable logging ensures that even admins cannot alter or delete logs after they are written.

Full explanation →

152

MCQhard

You are troubleshooting a Federated Learning model. Privacy leakage is occurring during model updates. Which parameter should you adjust to improve privacy?

A.Change the learning rate

B.Implement secure aggregation

C.Increase the batch size

D.Decrease the number of epochs

AnswerB

Secure aggregation ensures individual updates are not visible to the server.

Why this answer

Adding secure aggregation and increasing the noise in gradients helps prevent inference attacks on model updates.

Full explanation →

153

Multi-Selecthard

Which TWO technical methods ensure data integrity during the life cycle?

Select 2 answers

A.Checksums

B.Load balancing

C.Data compression

D.Data deduplication

E.Digital signatures

AnswersA, E

Detects data corruption.

Why this answer

Checksums and digital signatures ensure that data has not been tampered with or corrupted.

Full explanation →

154

MCQhard

In the context of 'Privacy-Preserving Machine Learning', what is the purpose of the 'Membership Inference Attack' simulation during testing?

A.To identify if training data is leaked

B.To optimize model accuracy

C.To improve training speed

D.To validate input quality

AnswerA

It detects if the model memorizes individual training data.

Why this answer

This simulation tests if a model reveals whether a specific individual's data was used in the training set, exposing a potential privacy breach.

Full explanation →

155

Multi-Selecteasy

Which TWO of the following are primary pillars of the Data Life Cycle Management?

Select 2 answers

A.Data Disposal

B.Marketing Strategy

C.Data Collection

D.Application Maintenance

E.Network Security

AnswersA, C

The end of the life cycle.

Why this answer

Data collection and disposal are two critical phases in the lifecycle that require specific privacy controls.

Full explanation →

156

Multi-Selectmedium

Which TWO techniques should be used to protect PII in non-production environments to ensure the data remains non-identifiable?

Select 2 answers

A.Pseudonymization

B.Full database mirroring

C.Public internet exposure

D.Plaintext replication

E.Anonymization

AnswersA, E

Separating identifiers from data reduces risk.

Why this answer

Anonymization and pseudonymization (if key access is restricted) are standard methods for protecting non-prod data.

Full explanation →

157

MCQmedium

A privacy engineer is reviewing a 'consent management platform' (CMP). Which configuration is necessary to ensure compliance with a user's choice to 'opt-out' of data sharing?

A.Programmatic propagation of the opt-out signal

B.Sending an email confirmation to the user

C.Storing the choice in a local browser cookie only

D.Displaying the privacy policy on the landing page

AnswerA

The signal must be actionable by all integrated vendors to be effective.

Why this answer

The CMP must broadcast the opt-out signal to all downstream ad-tech and analytics providers via a standardized framework like GPP or TCF.

Full explanation →

158

MCQmedium

A system architect is using 'Zero Trust' network principles. How does this enhance privacy?

A.By encrypting all disk storage

B.By centralizing all user data

C.By preventing user account creation

D.By verifying every access request

AnswerD

It eliminates implicit trust, ensuring only authorized access to PII.

Why this answer

It forces authentication and authorization for every request, preventing lateral movement and unauthorized data access.

Full explanation →

159

MCQhard

During an audit, it is discovered that privacy policies have not been updated for three years, despite significant changes in business data collection practices. Which governance failure is most evident?

A.Lack of a formal policy review and approval lifecycle.

B.Insufficient budget for the privacy office.

C.Inadequate training for staff on data privacy.

D.Failure of the IT department to implement technical controls.

AnswerA

Policies require periodic review cycles triggered by business changes or regulatory updates.

Why this answer

Privacy policies must reflect current processing activities; failing to update them indicates a breakdown in the policy lifecycle management process.

Full explanation →

160

Multi-Selecthard

Which THREE privacy-enhancing technologies are commonly used to facilitate data analysis on distributed datasets without centralizing the raw PII?

Select 3 answers

A.Federated Learning

B.Secure Multi-Party Computation

C.Differential Privacy

D.Full disk encryption

E.Network load balancing

AnswersA, B, C

Trains models without moving raw data.

Why this answer

SMPC, Federated Learning, and Differential Privacy all allow for privacy-preserving analysis of distributed data.

Full explanation →

161

MCQmedium

An organization is using 'Bring Your Own Key' (BYOK) in their cloud environment. What is the primary privacy benefit?

A.Faster encryption processing

B.Improved data availability

C.Reduced storage costs

D.Control over key lifecycle

AnswerD

The organization controls when keys are destroyed, limiting provider access.

Why this answer

BYOK allows the data controller to maintain custody of the encryption keys, preventing the cloud provider from accessing the data.

Full explanation →

162

Multi-Selectmedium

Which THREE types of data are typically targeted for aggressive minimization?

Select 3 answers

A.System logs for performance analysis

B.Redundant, Obsolete, and Trivial (ROT) data

C.Publicly available documentation

D.Financial/Payment information

E.Personally Identifiable Information (PII)

AnswersB, D, E

Provides no value and increases storage and risk.

Why this answer

PII, sensitive financial data, and redundant/outdated data are the primary targets for minimization.

Full explanation →

163

MCQeasy

A CDPSE is advising on a website redesign. What is the most important privacy-related feature for a contact form?

A.Integrating the form with a social media account.

B.Adding a 'Submit' button with a vibrant color.

C.Allowing users to upload large file attachments.

D.Including a link to the privacy policy near the submission button.

AnswerD

Providing context and information at the point of collection is required for transparency.

Why this answer

Providing a clear link to the privacy notice at the point of data collection is a fundamental transparency requirement.

Full explanation →

164

MCQeasy

You are using AWS Macie to perform a classification scan. Which feature should be configured to notify the privacy team when sensitive data is found?

A.IAM User Permission

B.CloudTrail Log

C.S3 Policy

D.EventBridge Rule

AnswerD

EventBridge is the standard way to trigger alerts from Macie findings.

Why this answer

Macie triggers 'EventBridge' alerts that can be routed to notification services like SNS.

Full explanation →

165

MCQmedium

Which feature in an identity provider (IdP) supports privacy by limiting the scope of claims sent to a relying party?

A.Token refresh policy

B.Group membership mapping

C.OIDC Scopes

D.Multi-factor authentication

AnswerC

Scopes define the subset of identity information shared.

Why this answer

OIDC scopes allow the requester to ask for only the minimum set of attributes required, supporting data minimization.

Full explanation →

166

MCQhard

A company is moving to a cloud-based SaaS environment. Who retains the primary responsibility for privacy governance?

A.The individual data subjects.

B.The Lead Supervisory Authority.

C.The Data Controller (the company).

D.The Network Infrastructure team.

E.The Cloud Service Provider (CSP).

AnswerC

Privacy governance accountability cannot be transferred to a provider.

Why this answer

The data controller remains accountable for data protection regardless of where it is processed.

Full explanation →

167

MCQeasy

A web application stores user logs in a cleartext format. To implement 'Privacy by Design', which technical control is the most appropriate first step to minimize data exposure?

A.Apply data masking to the log fields

B.Rotate encryption keys weekly

C.Implement full-disk encryption

D.Enable verbose logging for debugging

AnswerA

Masking is an effective method to remove or hide sensitive data before it is persisted.

Why this answer

Data minimization ensures that only necessary data is collected and stored, reducing the attack surface immediately.

Full explanation →

168

MCQhard

You are utilizing Microsoft Purview to enforce a retention label on a SharePoint site. What occurs when the retention period expires?

A.The file is permanently deleted

B.The file is moved to the recycle bin

C.The file is encrypted

D.The file becomes read-only

AnswerA

When configured, the retention label triggers permanent removal.

Why this answer

Purview retention labels can be configured to 'Automatically delete' content once the retention period ends.

Full explanation →

169

MCQmedium

Which technique should be used to protect personal data during software testing?

A.Data masking or using synthetic data sets.

B.Implementing strict multi-factor authentication for developers.

C.Full encryption of the test database.

D.Restricting the test environment access to only senior engineers.

AnswerA

Masking/synthetic data prevents real PII exposure during testing.

Why this answer

Data masking or anonymization is the standard practice for using production data in non-production environments.

Full explanation →

170

Multi-Selectmedium

Which TWO of the following are effective ways to protect logs that contain PII?

Select 2 answers

A.Encryption at rest

B.Disabling log rotations

C.Restricted IAM access policies

D.Broad read access for all employees

E.Sending logs to a public URL

AnswersA, C

Protects data on the storage medium.

Why this answer

Encryption and restricted access control are necessary for protecting sensitive data inside log files.

Full explanation →

171

MCQmedium

When using IBM InfoSphere Information Governance Catalog to map sensitive data, what is the primary purpose of a 'Data Class'?

A.To store physical data

B.To manage retention policies

C.To identify and classify sensitive data patterns

D.To define user access

AnswerC

Data classes provide the pattern definitions (regex/logic) for automated classification.

Why this answer

Data classes define the structure of data (e.g., Credit Card Number) to allow automated identification in the catalog.

Full explanation →

172

MCQhard

A CDPSE is auditing a legacy application that stores passwords in plain text. What is the most effective immediate mitigation strategy?

A.Perform a Data Protection Impact Assessment (DPIA) to document the risk.

B.Conduct a data breach simulation to see if the vulnerability is exploitable.

C.Implement an access control list (ACL) to restrict who can see the plain text passwords.

D.Implement a salted hashing algorithm and re-hash all existing credentials.

AnswerD

Hashing is the industry-standard technical control for storing passwords.

Why this answer

Immediate remediation of the vulnerability is required, followed by a formal risk assessment of the exposure.

Full explanation →

173

MCQhard

When evaluating a third-party's security, what should the CDPSE focus on to ensure effective privacy risk management?

A.The visual design of the vendor's public-facing website.

B.The vendor's number of employees.

C.The right to audit the vendor's privacy and security controls.

D.The vendor's annual marketing expenditure.

AnswerC

Contractual audit rights are the primary way to verify third-party compliance.

Why this answer

The ability to audit the vendor's adherence to security and privacy standards is the most important control.

Full explanation →

174

Multi-Selecteasy

Which TWO actions should be taken when performing a 'Privacy Impact Assessment' (PIA) on a new software tool?

Select 2 answers

A.Delete all historical databases

B.Update the server firmware version

C.Purchase the most expensive enterprise security suite

D.Evaluate potential risks to the rights and freedoms of individuals

E.Document the data lifecycle from collection to destruction

AnswersD, E

Assessing risk is the primary goal of the PIA process.

Why this answer

A PIA involves identifying the flow of data and assessing the risks to data subject rights.

Full explanation →

175

Multi-Selectmedium

Which TWO features in a cloud IAM configuration help enforce 'Least Privilege' as a privacy control?

Select 2 answers

A.Attribute-Based Access Control (ABAC)

B.Hardcoding credentials in scripts

C.Just-in-Time (JIT) privileged access

D.Setting all S3 buckets to public

E.Adding all users to the 'Admin' group

AnswersA, C

ABAC allows for dynamic, context-aware access decisions.

Why this answer

Attribute-Based Access Control and Just-in-Time access are primary mechanisms for granular, minimal access.

Full explanation →

176

MCQeasy

Which of the following is an example of a physical privacy control?

A.Disk encryption

B.Access logs

C.Data masking

D.Biometric server room entry

AnswerD

This is a physical control protecting the infrastructure.

Why this answer

Securing the server room prevents unauthorized physical access to the hardware holding the data.

Full explanation →

177

MCQeasy

Which tool within the SAP Data Intelligence suite is most appropriate for defining the lifecycle of data objects based on their business value?

A.Metadata Explorer

B.Data Pipeline Designer

C.Machine Learning Scenario Manager

D.Connection Management

AnswerA

This tool helps categorize and manage data lifecycle attributes.

Why this answer

The 'Metadata Explorer' in SAP Data Intelligence allows users to view and categorize data based on lifecycle stages.

Full explanation →

178

MCQmedium

Which governance tool is used to demonstrate 'Privacy by Default'?

A.A firewall configuration report.

B.A set of design specifications showing restrictive default settings.

C.A customer feedback survey.

D.A list of employee names.

AnswerB

Documenting the default posture is evidence of privacy by default.

Why this answer

Privacy by default means settings are set to the most restrictive option initially.

Full explanation →

179

MCQhard

In Collibra, you are mapping a data element to a business term to support data minimization. What is the effect of changing the 'Data Stewardship' workflow status to 'Deprecated'?

A.Triggers an immediate deletion task in the source DB

B.Archives the metadata record and removes it from search

C.Deletes the physical data source

D.Prevents unauthorized users from editing the metadata

AnswerB

Deprecation effectively hides the data from the business catalog, reducing unnecessary usage.

Why this answer

Deprecation in Collibra removes the asset from active discovery catalogs, preventing further use and supporting minimization.

Full explanation →

180

Multi-Selectmedium

Which TWO of the following are key privacy engineering objectives when designing a system that processes sensitive health data?

Select 2 answers

A.Data minimization

B.Hardware cost reduction

C.Maximum system availability

D.Transparency of processing

E.High performance throughput

AnswersA, D

Reducing PII collection is essential.

Why this answer

Data minimization and transparency are fundamental to privacy engineering for sensitive data.

Full explanation →

181

Multi-Selectmedium

Which TWO of the following are common responsibilities of the privacy office?

Select 2 answers

A.Setting the company's annual sales targets.

B.Writing code for the company website.

C.Developing and delivering privacy training.

D.Monitoring privacy compliance.

E.Repairing broken printers.

AnswersC, D

Training is key to maintaining a privacy-conscious culture.

Why this answer

Privacy offices oversee compliance and drive training programs.

Full explanation →

182

MCQmedium

When using Talend Data Fabric for data life cycle management, what is the function of the 'Data Stewardship' component?

A.To create data maps

B.To automate deletion

C.To allow manual intervention in data processing

D.To encrypt data

AnswerC

It facilitates manual review of records identified during the lifecycle.

Why this answer

It provides a platform for data stewards to manually review and remediate data that failed quality or privacy checks.

Full explanation →

183

MCQeasy

A company wants to collect geolocation data from mobile users. Which privacy principle should be applied first?

A.Automated archival of location history after one week.

B.Publicly disclosing the use of geolocation in the privacy policy.

C.Data minimization by requesting access to precise location only when necessary.

D.Full encryption of geolocation data in transit.

AnswerC

Data minimization is a core principle ensuring only essential data is collected.

Why this answer

Purpose limitation (specifically, data minimization and consent) is the first step in collecting sensitive data.

Full explanation →

184

MCQmedium

A CDPSE practitioner is tasked with aligning the organization's privacy strategy with business goals. Which of the following activities should be prioritized to ensure that privacy governance is embedded within the Software Development Life Cycle (SDLC)?

A.Review the privacy policy after the product has been moved to general availability.

B.Perform a penetration test on the production environment after the release deployment.

C.Automate data deletion scripts after the data retention period has expired.

D.Conduct a Privacy Impact Assessment (PIA) during the initial requirements gathering phase.

AnswerD

Integrating PIAs early in the SDLC is a fundamental practice of Privacy by Design.

Why this answer

Privacy by design requires early integration into the SDLC, typically through Privacy Impact Assessments (PIA) at the requirements phase.

Full explanation →

185

MCQeasy

What is the primary privacy advantage of using 'On-Device Processing' for machine learning inference?

A.Easier debugging of the model

B.Reduction in data transfer of sensitive inputs

C.Faster cloud infrastructure scaling

D.Improved model accuracy

AnswerB

By not sending the data to the cloud, the risk of interception or unauthorized storage is eliminated.

Why this answer

On-device processing keeps raw user data on the local device, preventing the need to transmit sensitive information to a central server.

Full explanation →

186

MCQhard

When a company faces conflicting privacy regulations (e.g., GDPR vs. local laws), what is the most robust governance stance?

A.Apply the weakest regulation to reduce costs.

B.Ignore both and wait for the regulator to advise.

C.Apply the most stringent standard globally.

D.Only comply with the law of the country where the head office is located.

AnswerC

This high-water mark approach is a common and effective risk-mitigation strategy.

Why this answer

Applying the most stringent requirement ensures compliance across the board, minimizing risk.

Full explanation →

187

Multi-Selecthard

Which THREE steps are vital when responding to a Data Subject Access Request (DSAR)?

Select 3 answers

A.Publicly announce the identity of the person requesting the data.

B.Delete all data immediately after the request is received.

C.Provide the requested data in a secure and usable format to the data subject.

D.Search and retrieve the relevant personal data across the organization's systems.

E.Verify the identity of the requester to prevent unauthorized disclosure.

AnswersC, D, E

Secure delivery is the final, essential step of the DSAR process.

Why this answer

Verification, retrieval, and secure delivery are the critical steps in the DSAR workflow.

Full explanation →

188

MCQeasy

Which of the following is the most critical element to include in a Privacy Notice under GDPR to fulfill the 'Right to be Informed'?

A.The legal basis for the processing of personal data.

B.The specific hardware models used for storage.

C.The name of the Chief Privacy Officer.

D.The company's annual revenue.

AnswerA

The legal basis is a mandatory disclosure under Articles 13 and 14.

Why this answer

The GDPR requires organizations to explicitly state the legal basis for processing, as this justifies the collection and use of personal data.

Full explanation →

189

MCQhard

When using Homomorphic Encryption, what is the primary limitation for a privacy engineer to consider?

A.Computational overhead

B.Data loss during processing

C.Inability to perform search

D.Lack of vendor support

AnswerA

The performance cost is the main barrier to widespread adoption.

Why this answer

Homomorphic encryption is extremely computationally intensive, often causing significant performance degradation.

Full explanation →

190

Multi-Selectmedium

Which TWO of the following are effective ways to measure the success of a privacy program?

Select 2 answers

A.Reduction in the number of privacy-related incidents.

B.Successful completion of internal and external privacy audits.

C.The color of the office walls.

D.The number of coffee machines in the breakroom.

E.How many office chairs are purchased.

AnswersA, B

Fewer incidents indicate effective controls.

Why this answer

Measuring compliance and incident trends provides objective success data.

Full explanation →

191

MCQhard

An organization is building a privacy program. What indicates that the privacy strategy is aligned with business operations?

A.The privacy team has their own budget.

B.The policy is saved on a shared drive.

C.The DPO reports to the CEO once a year.

D.Privacy controls are integrated into business workflows.

AnswerD

Operational integration confirms strategy is being lived out.

Why this answer

Integration into daily processes is the highest indicator of operational alignment.

Full explanation →

192

MCQmedium

A company is preparing for a CCPA audit. Which internal process is most important to demonstrate compliance regarding the 'Right to Know'?

A.Marketing brochures describing the product features.

B.The latest penetration test report for the customer portal.

C.A fully updated data inventory map showing data lineage.

D.A list of all employees with database access.

AnswerC

Data mapping is essential to answer what, where, and why data is collected.

Why this answer

The Right to Know requires that the organization can produce a record of what data was collected, why, and with whom it was shared.

Full explanation →

193

MCQhard

You are configuring a data retention policy in AWS S3 Lifecycle rules. Which action should be selected to minimize data storage costs while remaining compliant with privacy laws?

A.Enable Versioning

B.Delete incomplete multipart uploads

C.Transition to Glacier

D.Expire objects

AnswerC

This moves data to cheaper storage while retaining it for compliance.

Why this answer

Transitioning objects to 'Glacier Instant Retrieval' minimizes cost while keeping data available for audits.

Full explanation →

194

MCQeasy

Which governance structure is most appropriate for a decentralized organization managing privacy risks?

A.Hub-and-spoke model with localized privacy champions.

B.Ad-hoc committee based on project needs.

C.Outsourcing all privacy functions.

D.Centralized command-and-control structure.

AnswerA

This allows central policy setting with local implementation.

Why this answer

Decentralized organizations benefit from a hub-and-spoke model.

Full explanation →

195

Multi-Selecteasy

Which THREE actions are part of a secure data disposal process?

Select 3 answers

A.Moving data to cold storage

B.Verification of destruction

C.Digital wiping/sanitization

D.Renaming files

E.Logging of the disposal event

AnswersB, C, E

Confirms the process worked.

Why this answer

Verification, documentation, and technical wiping are essential for compliant disposal.

Full explanation →

196

MCQmedium

Which role is primarily responsible for ensuring that privacy policies are communicated effectively across the organization?

A.The janitorial staff.

B.The external auditors.

C.The Privacy Office or DPO.

D.The IT helpdesk.

AnswerC

Driving privacy awareness is a core function of the DPO/Privacy Office.

Why this answer

The privacy leadership team (often the DPO) is responsible for internal communication and culture.

Full explanation →

197

Multi-Selecthard

Which THREE components should be included in a data inventory to ensure it is actionable for DSR (Data Subject Request) fulfillment?

Select 3 answers

A.Storage location

B.Data owner/steward

C.Server uptime percentage

D.Network bandwidth usage

E.Data category/type

AnswersA, B, E

Helps locate the data to process the request.

Why this answer

To fulfill a DSR, you must know what the data is, who owns it, and where it resides.

Full explanation →

198

MCQeasy

A privacy engineer is using Terraform to enforce encryption at rest for S3 buckets. Which resource attribute should be set to 'aws:kms'?

A.bucket_acl

B.versioning_enabled

C.server_side_encryption_configuration

D.public_access_block

AnswerC

This block defines the encryption settings for the bucket.

Why this answer

The 'sse_algorithm' attribute must be set to 'aws:kms' to enforce server-side encryption with KMS.

Full explanation →

199

MCQeasy

While using the Salesforce Data Masking tool, which option should be selected to ensure that production data copied to a sandbox is rendered unusable for unauthorized parties?

A.Object Permissions

B.Field Level Security

C.Anonymization Masking

D.Data Refresh

AnswerC

This replaces sensitive values with scrambled data, rendering it unusable for production identification.

Why this answer

Salesforce Data Masking allows choosing 'Masking' algorithms (e.g., Anonymization) to replace real data with fake values.

Full explanation →

200

MCQeasy

Which of the following is an example of an 'operational' technical control for privacy?

A.Privacy policy document

B.Standard Operating Procedure

C.Privacy impact assessment

D.Data discovery scanning tools

AnswerD

These are active tools used in the environment to manage data.

Why this answer

Automated data discovery scans identify where PII exists, which is necessary for managing privacy.

Full explanation →

201

MCQeasy

Which of the following is the most effective technical control for implementing the 'Right to be Forgotten' in a distributed microservices environment?

A.Deleting individual database records in each service

B.Archiving logs for 7 years

C.Increasing database logging levels

D.Implementing a centralized 'Identity Deletion' event bus

AnswerD

An event bus ensures consistency and auditability for deletion requests across microservices.

Why this answer

A centralized identity service allows for the systematic propagation of deletion requests across all downstream services.

Full explanation →

202

MCQmedium

A multinational organization is struggling to maintain consistent privacy practices across different jurisdictions. Which approach is most effective for centralizing privacy governance while allowing for local legal variations?

A.Standardize all data processing to occur only in the home country.

B.Adopt a 'hub and spoke' privacy governance model.

C.Allow each region to define its own privacy framework independently.

D.Enforce a single, global privacy policy that overrides all local laws.

AnswerB

This model provides a strong central core while allowing for flexible local execution.

Why this answer

A 'hub and spoke' model allows for central policy oversight while enabling local offices to adapt to specific legal requirements.

Full explanation →

203

MCQhard

You are integrating a homomorphic encryption library into a cloud-based financial system. What is the primary trade-off you must communicate to stakeholders regarding the implementation of Fully Homomorphic Encryption (FHE)?

A.Incompatibility with cloud storage

B.Increased storage requirements

C.Loss of data integrity

D.Significant latency during computation

AnswerD

FHE operations require massive computational overhead, causing slow query performance.

Why this answer

FHE is computationally expensive, leading to significant latency increases for complex analytical operations on encrypted data.

Full explanation →

204

MCQhard

When a conflict arises between business requirements and privacy principles, what should be the first step in the governance process?

A.Ignore the privacy principle.

B.Conduct a formal Privacy Impact Assessment (PIA).

C.Ask the CEO to override the privacy policy.

D.Immediately terminate the project.

AnswerB

A PIA identifies risks and explores mitigation options to balance needs.

Why this answer

A structured risk assessment is necessary to weigh the business need against privacy risk.

Full explanation →

205

MCQmedium

A company is implementing a Bring Your Own Device (BYOD) policy. What is the primary privacy challenge?

A.Ensuring the device battery lasts for the entire workday.

B.Ensuring that all devices use the same operating system version.

C.Managing the cellular data costs of employees.

D.Separating corporate data from personal data to maintain user privacy.

AnswerD

Maintaining this separation is essential to prevent the employer from over-collecting personal data.

Why this answer

Mixing personal and professional data on one device creates a risk of unauthorized access or over-collection by the organization.

Full explanation →

206

Multi-Selecthard

Which TWO methods are effective for preventing 'Inference Attacks' in a data analytics platform?

Select 2 answers

A.Query throttling/auditing

B.Disabling all encryption

C.Differential privacy

D.Full public data access

E.Raw data export

AnswersA, C

Limits the ability to reconstruct data.

Why this answer

Differential privacy and query auditing/throttling help prevent attackers from inferring sensitive data from multiple queries.

Full explanation →

207

MCQmedium

A multinational company is evaluating a SaaS solution. As a CDPSE, you must ensure that the vendor's data retention policy aligns with your organization's internal privacy standards. Where should this requirement be formally documented?

A.In the software's 'About' page.

B.In the end-user licensing agreement (EULA).

C.In the marketing brochure provided by the vendor.

D.In the Data Processing Agreement (DPA).

AnswerD

The DPA explicitly covers the instructions for data handling and retention.

Why this answer

The Data Processing Agreement (DPA) is the legally binding document that defines the responsibilities, including retention, of the data processor.

Full explanation →

208

MCQhard

You are mapping personal data flows for a global enterprise. Which approach is most effective for demonstrating accountability under GDPR?

A.Conducting periodic penetration tests.

B.Maintaining a comprehensive Record of Processing Activities (ROPA).

C.Updating the external privacy policy annually.

D.Signing NDAs with all employees.

AnswerB

Article 30 ROPAs are the primary mechanism for demonstrating accountability.

Why this answer

Accountability requires documented proof of processing activities.

Full explanation →

209

MCQeasy

Which document should a CDPSE review to understand the organization's legal basis for processing employee personal data?

A.The vendor management list.

B.The firewall configuration log.

C.The employee handbook.

D.The Record of Processing Activities (ROPA).

AnswerD

ROPA explicitly requires documenting the legal basis for each processing activity.

Why this answer

The Privacy Notice or the internal Record of Processing Activities (ROPA) outlines the legal basis for processing.

Full explanation →

210

MCQmedium

When designing a privacy incident response plan, who should be the primary decision-maker for reporting a breach to a regulator?

A.The software vendor.

B.The Data Protection Officer (DPO).

C.The office administrator.

D.The social media manager.

AnswerB

The DPO is responsible for assessing and reporting breach risks.

Why this answer

The DPO or legal counsel usually holds the authority to assess and report breaches.

Full explanation →

211

Multi-Selecthard

Which THREE considerations are critical when implementing 'Anonymization' to ensure it meets the standard of being 'irreversible'?

Select 3 answers

A.Prevention of inference attacks where attributes can be predicted

B.Requirement for user consent

C.Encrypting the data with AES-256

D.Protection against linkage attacks using quasi-identifiers

E.Removal of all direct identifiers

AnswersA, D, E

Even without direct identity, sensitive attribute prediction is a risk.

Why this answer

Irreversibility requires removing all quasi-identifiers, ensuring no linkage is possible, and preventing inference attacks.

Full explanation →

212

MCQmedium

You are managing Azure Information Protection (AIP) labels. Which action is necessary to ensure that documents classified as 'Highly Confidential' are automatically encrypted?

A.Modify the Information Rights Management (IRM) template

B.Configure Protection settings in the Label

C.Apply Azure Policy

D.Enable Auto-Labeling on the Data Source

AnswerB

Protection settings within the sensitivity label allow for automatic encryption.

Why this answer

In AIP, label configuration requires selecting 'Encrypt' under the 'Protection' settings to enforce technical controls.

Full explanation →

213

MCQmedium

Which technique is most effective for minimizing PII in a non-production database environment while maintaining referential integrity?

A.Tokenization

B.Full deletion

C.Masking with random noise

D.Hashing with a static salt

AnswerA

Tokenization allows replacing sensitive data with non-sensitive placeholders while preserving format and integrity.

Why this answer

Format-preserving encryption or tokenization maintains the structure of the data for testing while protecting the underlying PII.

Full explanation →

214

MCQeasy

What does 'Privacy by Default' imply regarding system configuration?

A.Systems are configured to be open until the user manually secures them.

B.The system is pre-configured with the strictest privacy settings.

C.Users are required to opt-in to all marketing emails.

D.Data is deleted after 30 days if not accessed by an administrator.

AnswerB

Privacy by default requires that the most protective settings are the default state.

Why this answer

Privacy by default means that the most restrictive privacy settings are applied automatically without user action.

Full explanation →

215

Multi-Selecthard

Which THREE items should be included in a Privacy Policy that aligns with global transparency requirements?

Select 3 answers

A.The purpose and legal basis for the processing of personal data.

B.The period for which the personal data will be stored.

C.The company's quarterly financial earnings report.

D.Information about the data subject's rights, such as the right to access or erasure.

E.The internal passwords of the IT administrators.

AnswersA, B, D

Users have a right to know why their data is processed.

Why this answer

The purpose, the retention period, and the rights of the user are fundamental components of a compliant privacy policy.

Full explanation →

ISACA Certified Data Privacy Solutions Engineer (CDPSE) (CDPSE) (CDPSE) — Questions 151–215