CDPSE - Certified Data Privacy Solutions Engineer Privacy Incident Response Questions and Answers

Question 1

An analyst detects unusual outbound traffic from a server storing customer PII, suggesting potential data exfiltration.
According to the NIST incident response lifecycle, what is the IMMEDIATE next step after this initial detection?

Accepted Answer

Analyze the event to understand its scope, nature, and impact.

Answer

Notify the affected data subjects and regulatory authorities.

Answer

Isolate the server from the network to prevent further data loss.

Answer

Deploy a patch to the vulnerability that allowed the unauthorized access.

Question 2

An organization is creating its privacy incident response plan. Which of the following components is MOST critical for ensuring a coordinated and effective real-time response during a crisis?

Accepted Answer

A predefined communication and escalation matrix with clearly defined roles and responsibilities.

Answer

A detailed log of all past security incidents and their resolutions.

Answer

A budget pre-approved for post-incident credit monitoring services.

Answer

A complete inventory of all third-party data processors and their contact information.

Question 3

Under the GDPR, which of the following is the PRIMARY trigger that elevates a privacy incident to a notifiable data breach requiring communication to a supervisory authority within 72 hours?

Accepted Answer

The incident is likely to result in a risk to the rights and freedoms of natural persons.

Answer

The incident was caused by a malicious external actor.

Answer

The incident affected more than 1,000 data subjects.

Answer

The incident involved the accidental disclosure of encrypted personal data.

Question 4

A privacy engineer discovers that an internal sales dashboard, which aggregates unanonymized customer data, has been misconfigured and is publicly accessible on the internet. What is the MOST appropriate immediate action to contain this incident?

Accepted Answer

Immediately revoke public access and restrict it to authorized personnel.

Answer

Perform a full forensic backup of the dashboard's database.

Answer

Begin identifying which customers' data was exposed.

Answer

Draft a notification letter for the relevant data protection authority.

Question 5

Following the complete resolution of a significant data breach, what is the MOST important activity in the post-incident phase of the response lifecycle?

Accepted Answer

Conducting a 'lessons learned' review to identify the root cause and improve future responses.

Answer

Calculating the final financial cost of the incident for insurance purposes.

Answer

Archiving all forensic evidence and documentation related to the incident.

Answer

Delivering a final report on the incident to executive management.

Question 6

A database administrator unintentionally runs a script that discloses sensitive employee salary data to a wide group of project managers who are not authorized to view it. The data never left the company's internal network. Which statement BEST describes this event?

Accepted Answer

This is a privacy incident because personal data was disclosed to unauthorized individuals.

Answer

This is a security incident but not a privacy incident because no data was exfiltrated.

Answer

This is not an incident of any kind because the action was unintentional.

Answer

This is a data quality issue that should be handled through a standard IT support ticket.