CDPSE Data Lifecycle Management 3

Question 1

What is a Record of Processing Activities (RoPA) primarily used for?

Accepted Answer

Documenting all personal data processing operations within an organization

Answer

Encrypting data in transit

Answer

Generating automated data deletion schedules

Answer

Monitoring employee data access logs

Question 2

Which of the following BEST describes 'data provenance' in the context of privacy?

Accepted Answer

The origin and chain of custody of data throughout its lifecycle

Answer

The legal basis for processing personal data

Answer

The geographic location where data is stored

Answer

The classification level assigned to sensitive data

Question 3

An organization wants to repurpose customer purchase history for an AI training dataset. What privacy step must occur FIRST?

Accepted Answer

Assess whether the new use is compatible with the original collection purpose

Answer

Encrypt the dataset with AES-256

Answer

Delete customers who opt out before training

Answer

Obtain a new technology license

Question 4

Which sanitization standard is MOST commonly referenced for the secure disposal of US government data on magnetic media?

Accepted Answer

NIST SP 800-88

Answer

ISO/IEC 27001

Answer

PCI DSS v4.0

Answer

FIPS 140-3

Question 5

What does a data retention legal hold require an organization to do?

Accepted Answer

Suspend normal retention schedules and preserve relevant data for legal proceedings

Answer

Immediately delete all data related to ongoing litigation

Answer

Encrypt all potentially relevant data in place

Answer

Transfer data to a third-party escrow service

Question 6

Why is data lineage documentation important for CDPSE professionals?

Accepted Answer

It enables organizations to trace data transformations and demonstrate compliance accountability

Answer

It speeds up database query performance

Answer

It automatically enforces access control policies

Answer

It reduces the cost of cloud data storage