Privacy Engineering

Which TWO actions should be taken when decommissioning an old server containing PII?

In a Google Cloud environment, you need to implement a policy to automatically redact PII from documents uploaded to Cloud Storage. Which service should be integrated?

Which TWO technical controls are effective for limiting the scope of PII access in a cloud-based SQL environment?

You are configuring an API gateway to implement 'Data Minimization' via response filtering. How is this typically achieved for JSON payloads?

When implementing Privacy by Design (PbD) in a new mobile application, which TWO of the following are considered proactive technical controls?

A privacy engineer is implementing a data subject access request (DSAR) system for a multinational corporation. The system must retrieve all personal data for a given user across a microservices architecture. The engineer proposes using a centralized data lake that ingests all personal data from various services in near real-time. Which concern is most critical from a privacy engineering perspective?

What is the primary function of a 'Data Protection Impact Assessment' (DPIA) from an engineering perspective?

A privacy engineer is configuring Azure Data Factory to ensure PII is masked during integration. Which feature should be configured to apply dynamic data masking on SQL targets?

An organization wants to monitor data access patterns for potential privacy violations. Which tool is best for detecting unusual access to PII tables?

A privacy engineer is reviewing a mobile application that transmits precise geolocation coordinates to a backend service every 30 seconds, even when the user is not actively using the app. The privacy notice states that location is collected only while the app is in use. Which engineering change BEST aligns the application's behaviour with the stated notice?

A privacy engineer is implementing a consent management platform (CMP) for a website that uses cookies for analytics, advertising, and essential functions. The CMP must ensure that non-essential cookies are not set before the user grants consent, and that the user's choice is honored on subsequent visits. Which technical design BEST meets these requirements?

A privacy engineer is implementing a data retention policy for a cloud-based SaaS application. The policy requires that customer data be deleted after 30 days of account inactivity. The application uses a multi-tenant database where each tenant's data is logically separated but stored in the same physical tables. Which technical approach best ensures that the retention policy is enforced without affecting other tenants?

A privacy engineer is implementing differential privacy in a data analytics pipeline. To ensure the privacy budget remains intact over multiple queries, which technique should be applied?

A privacy engineer is implementing 'Tokenization' for credit card processing. Where should the 'vault' be situated to ensure the highest level of privacy?

A privacy engineer is implementing a consent management platform (CMP) for a website that uses cookies and similar tracking technologies. The CMP must comply with GDPR and ePrivacy Directive. Which TWO features are essential for the CMP to ensure valid consent? (Choose two.)

Which THREE factors are critical for balancing privacy and utility when using k-anonymity?

A privacy engineer is selecting a cloud service provider (CSP) for storing sensitive personal data. The organization requires that data be encrypted at rest and that the organization retain control over encryption keys. Which CSP feature best meets this requirement?

A company needs to share customer demographics with a third party. Which technique allows for statistical analysis without revealing individual identities?

Which component in an API gateway is used to ensure PII is not sent to third-party endpoints?

A privacy engineer is designing a new mobile health application that will collect continuous heart rate data from wearable sensors. The application must comply with GDPR and the organization's privacy policy, which mandates data minimization and purpose limitation. The engineer proposes storing raw sensor data indefinitely to support future research. Which action should the engineer take to align with privacy engineering principles?

Which feature in Microsoft Purview Information Protection should be used to automatically identify and classify documents containing credit card numbers as they are created?

A privacy engineer is auditing log data. Which action best aligns with data minimization requirements for logs?

A privacy engineer is designing a system that processes biometric templates for access control. The system must allow matching without ever storing a reversible form of the biometric. Which approach best meets this requirement?

A privacy engineer is configuring Azure SQL Database to ensure that sensitive columns containing PII are hidden from non-privileged users. Which feature should be implemented to achieve dynamic data masking?

Which TWO actions help improve privacy in a containerized environment (e.g., Kubernetes)?

A privacy engineer is reviewing a mobile application that collects precise GPS coordinates every 30 seconds, even when the user is not actively using the app. The product team wants to reduce privacy risk while preserving the app's core feature of showing nearby points of interest. Which change BEST aligns with the principle of data minimization?

A privacy engineer is reviewing a new marketing analytics tool that will process customer email addresses and purchase histories. The tool vendor proposes to store all data in a multi-tenant cloud database. Which privacy engineering control is most critical to implement to prevent cross-tenant data leakage?

Which of the following is an example of a Privacy-Enhancing Technology (PET) that focuses on data minimization?

In the context of Privacy by Design, what is the primary role of an 'Access Control Matrix' in a microservices architecture?

Which THREE of the following are considered standard 'Privacy-Enhancing Technologies' (PETs) used for data protection in analytics?

A privacy engineer is designing a system that stores user date-of-birth values in a database. The business requirement is to support age-band analytics (e.g., 18-24, 25-34) without ever exposing the exact birth date to the analytics team. Which privacy engineering technique should be implemented to meet this requirement?

A privacy engineer is reviewing a new mobile application that collects location data. The app currently requests access to the device's precise location every time it is opened, even when the user is not actively using the app. Which privacy engineering principle is being violated?

When designing a privacy-preserving data pipeline, which TWO strategies help achieve 'Data Minimization'?

A privacy engineer is reviewing a new customer relationship management deployment. The legal team requires that the system support data subject access requests, including the ability to produce a complete record of a customer's personal data and its processing history. Which capability is most directly required to satisfy this?

When implementing differential privacy in a data analytics pipeline, what is the primary technical trade-off the engineer must balance?

A privacy engineer is evaluating a new third-party API that will process personal data. The API requires sending data over the internet. To ensure privacy during transmission, which technical control should be implemented to protect the data in transit?

Which TWO of the following are key privacy controls in an AWS environment?

When pseudonymizing a database using SHA-256 hashing, what is the most critical requirement to prevent re-identification via brute-force or dictionary attacks?

Which THREE attributes are typically included in a 'Privacy Metadata' schema to support automated data governance?

Which THREE technical approaches assist in 'Right to Portability' implementation?

When using 'k-anonymity' to protect a dataset, what does the parameter 'k' represent?

A financial services firm is implementing a new mobile banking app. The privacy engineer must ensure that data collected from the app is minimized and that users can easily withdraw consent. Which design pattern best supports these requirements?

When configuring a Cloud Service Provider's (CSP) 'Storage Access' permissions, which configuration best supports the principle of data segregation?

A multinational e-commerce company is implementing a privacy-preserving data analytics pipeline. The pipeline ingests customer behavior events from web and mobile apps, and analysts need to query the data without accessing raw PII. The company wants to ensure that even if the analytics environment is compromised, raw PII remains protected. Which approach best achieves this?

A privacy engineer is implementing a data anonymization pipeline for a dataset containing user records. The goal is to prevent re-identification while maintaining data utility for analytics. Which two techniques should be applied to achieve this? (Choose two.)

You are designing a system for k-anonymity. If a dataset has an identifier that is unique to every row, what is the first step you must take before applying generalization?

Which principle is represented by ensuring a user's data is only available to the specific application service that needs it?

A privacy engineer is designing a customer analytics platform that ingests data from multiple sources. The platform will use Apache Kafka to stream events. To support the principle of data minimization, the engineer wants to ensure that only the fields necessary for analytics are persisted in the data lake. Which Kafka feature should be used to transform and filter records before they are written to the sink?

Which TWO of the following are privacy-by-design principles relevant to software development?

A privacy engineer is configuring a data retention policy for a marketing analytics platform. The policy states that raw event data containing device identifiers must be deleted after 90 days, while aggregated campaign metrics may be retained indefinitely. Which mechanism should be implemented to enforce this policy automatically?

A privacy engineer is implementing a consent management system for a mobile application. The app collects location data for personalized recommendations. Users must be able to withdraw consent at any time, and the app must stop processing location data immediately upon withdrawal. Which technical design best meets these requirements?

A healthcare analytics team wants to share a patient dataset with an external research partner for statistical modelling. The dataset contains direct identifiers such as full names, national ID numbers, and dates of birth. The privacy engineer must ensure that re-identification risk is minimized before sharing. Which technique should be applied FIRST to the dataset?

When configuring 'Dynamic Data Masking' in SQL Server, which permission is required for a user to see the unmasked data?

An organization uses a 'Privacy-preserving Synthetic Data' generator. What is the primary purpose of this tool in a development environment?

In a federated learning architecture, how is the model trained without exposing the underlying local datasets?

A privacy engineer is designing a data subject access request (DSAR) fulfillment pipeline that spans a primary PostgreSQL database, a data lake in Parquet format, and a search index. The engineer needs a technical mechanism that allows a single DSAR query to locate all records for a data subject across these heterogeneous stores without duplicating PII into a central repository. Which approach is MOST appropriate?

When implementing Secure Multi-Party Computation (SMPC), what is the primary benefit?

A privacy engineer is configuring an Apache Kafka cluster that ingests customer transaction events for downstream analytics. The events include personally identifiable information (PII). The engineer must ensure that PII is irreversibly transformed before it is written to the topic while allowing downstream consumers to still join events by a stable customer identifier. Which approach BEST satisfies this requirement?

Which THREE features are essential when implementing a robust 'Consent Management Platform' (CMP)?

Which THREE types of data are considered 'sensitive' and require heightened privacy controls?

To prevent 're-identification' of an anonymized dataset, what process should be applied if the dataset is merged with external public data?

What does a 'Privacy-Enhancing Technology' (PET) primarily aim to achieve?

A privacy engineer is designing a new customer analytics platform that will process personal data from multiple sources. The platform must support the GDPR right to erasure. Which two technical measures should be implemented to ensure erasure requests can be fulfilled effectively? (Choose two.)

A practitioner is deploying a Google Cloud Storage bucket. To ensure that files containing PII are automatically redacted before being accessed by external users, which Cloud DLP action should be integrated?

You are implementing 'Privacy-Preserving Record Linkage' between two databases. What is the most effective approach?

A privacy engineer is designing a data retention and deletion capability for a cloud-native application that stores personal data in an object storage bucket with versioning enabled and in a relational database with point-in-time recovery. The engineer must ensure that deletion requests are fully honored across both stores. Which TWO actions should the engineer take? (Choose two.)

Which THREE privacy engineering activities are performed during the 'Maintenance' phase of the system lifecycle?

Which THREE techniques are commonly used to achieve 'Pseudonymization' for PII in data sets?

To ensure that data access logs cannot be tampered with by an administrator with high privileges, which technical control should be implemented?

You are troubleshooting a Federated Learning model. Privacy leakage is occurring during model updates. Which parameter should you adjust to improve privacy?

In the context of 'Privacy-Preserving Machine Learning', what is the purpose of the 'Membership Inference Attack' simulation during testing?

A privacy engineer is deploying a new analytics platform that ingests event streams containing user identifiers. The business wants to correlate events across sessions but must ensure that if the pseudonymization key is compromised, past data cannot be re-linked to identities. Which design best meets this requirement?

A privacy engineer is configuring a database that stores personal data. To support the principle of access control, the engineer needs to ensure that users can only access data necessary for their role. Which database feature should be used to restrict access at the row level based on user attributes?

A privacy engineer is configuring a data retention policy for a system that processes customer personal data. The policy must automatically delete data after its retention period expires. Which technical control best ensures that personal data is not retained beyond its defined lifecycle?

A privacy engineer is reviewing a 'consent management platform' (CMP). Which configuration is necessary to ensure compliance with a user's choice to 'opt-out' of data sharing?

A system architect is using 'Zero Trust' network principles. How does this enhance privacy?

Which THREE privacy-enhancing technologies are commonly used to facilitate data analysis on distributed datasets without centralizing the raw PII?

A privacy engineer is implementing a Privacy Enhancing Technology (PET) evaluation framework for a new data collaboration project. The project involves sharing sensitive datasets with partners while preserving analytical utility. Which TWO properties should the framework require to be demonstrated before approving a PET for deployment? (Choose two.)

An organization is using 'Bring Your Own Key' (BYOK) in their cloud environment. What is the primary privacy benefit?

A privacy engineer is implementing a consent management platform for a mobile application. The platform must capture, store, and enforce user consent preferences across multiple microservices. Which two actions should the engineer take to ensure consent is technically enforceable and auditable? (Choose two.)

Which feature in an identity provider (IdP) supports privacy by limiting the scope of claims sent to a relying party?

A web application stores user logs in a cleartext format. To implement 'Privacy by Design', which technical control is the most appropriate first step to minimize data exposure?

Which TWO of the following are effective ways to protect logs that contain PII?

Which TWO actions should be taken when performing a 'Privacy Impact Assessment' (PIA) on a new software tool?

Which TWO features in a cloud IAM configuration help enforce 'Least Privilege' as a privacy control?

Which of the following is an example of a physical privacy control?

Which TWO of the following are key privacy engineering objectives when designing a system that processes sensitive health data?

A privacy engineer is working with a data science team that wants to use a production customer database for developing a churn prediction model. The database contains names, email addresses, and purchase histories. The team proposes to replace names and email addresses with random identifiers and store the mapping in a separate table. Which privacy engineering technique is being applied?

What is the primary privacy advantage of using 'On-Device Processing' for machine learning inference?

A privacy engineer is implementing a data retention policy for a customer relationship management (CRM) system. The policy requires that customer records be retained for exactly 7 years and then automatically deleted. The CRM vendor offers a built-in retention feature that soft-deletes records after the period, but the records remain recoverable for 30 days. Which action should the engineer take to ensure compliance with the retention policy?

A financial services firm is deploying a new customer onboarding portal that collects income, employment, and identity documents. The privacy engineer must embed privacy controls into the software development lifecycle. Which engineering practice BEST ensures privacy requirements are validated before production release?

When using Homomorphic Encryption, what is the primary limitation for a privacy engineer to consider?

A privacy engineer is building a data-sharing portal that lets external research partners query a customer database through a restricted SQL view. The requirement is that partners can only see aggregated counts and must never be able to re-identify an individual, even by combining multiple queries. Which control should the engineer implement to enforce this directly at the database layer?

A privacy engineer is using Terraform to enforce encryption at rest for S3 buckets. Which resource attribute should be set to 'aws:kms'?

Which of the following is an example of an 'operational' technical control for privacy?

A privacy engineer is designing a data processing pipeline that ingests customer records from multiple source systems into a centralized analytics environment. The design must enforce data minimization and purpose limitation. Which TWO engineering controls should be implemented? (Choose two.)

Which of the following is the most effective technical control for implementing the 'Right to be Forgotten' in a distributed microservices environment?

You are integrating a homomorphic encryption library into a cloud-based financial system. What is the primary trade-off you must communicate to stakeholders regarding the implementation of Fully Homomorphic Encryption (FHE)?

A privacy engineer at a health-tech company is designing a new patient portal. The portal must allow patients to view their own records but must prevent them from inferring information about other patients through aggregate queries. Which technical control should be implemented to meet this requirement?

Which TWO methods are effective for preventing 'Inference Attacks' in a data analytics platform?

A privacy engineer is designing a system that processes biometric data for access control. The system uses a fingerprint scanner that converts the fingerprint into a mathematical template. The engineer must ensure that the original fingerprint cannot be reconstructed from the stored template. Which technique should be implemented?

Which THREE considerations are critical when implementing 'Anonymization' to ensure it meets the standard of being 'irreversible'?

Which technique is most effective for minimizing PII in a non-production database environment while maintaining referential integrity?