CDPSE By Design Principles 3

Question 1

In the context of Security by Design, which practice ensures that a compromised component cannot escalate access to other system parts?

Accepted Answer

Least Privilege

Answer

Least Privilege limits each component or user to only the permissions required, containing damage if that component is compromised.

Question 2

A privacy engineer is designing a recommendation engine and proposes using aggregated cohort data instead of individual profiles. Which Privacy by Design technique does this represent?

Accepted Answer

Data Anonymization by Aggregation

Answer

Anonymization by aggregation groups individuals into cohorts so individual profiles are never created or exposed, reducing re-identification risk.

Question 3

Which Privacy by Design principle is most directly supported by implementing automatic data retention and deletion schedules?

Accepted Answer

Full Lifecycle Protection

Answer

Full Lifecycle Protection covers the entire data journey including secure destruction, so automated deletion schedules directly fulfill this principle.

Question 4

An engineer recommends that a new payment system fail to a locked-out state rather than an open state if authentication fails. This is an example of which security principle aligned with Privacy by Design?

Accepted Answer

Fail Secure (Fail Safe)

Answer

Fail Secure ensures that when a system fails, it defaults to denying access rather than inadvertently granting it.

Question 5

How does the concept of 'Privacy by Default' differ from 'Privacy by Design'?

Accepted Answer

Privacy by Default is the operational setting; Privacy by Design is the architectural approach

Answer

Privacy by Design is the overarching framework embedding privacy into systems, while Privacy by Default is one of its seven principles specifying the most protective settings must be automatic.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE By Design Principles 3