CDPSE CDPSE 4

Question 1

A CDPSE is asked to implement a records of processing activities (RoPA). Which element is REQUIRED under GDPR Article 30?

Accepted Answer

Categories of personal data and recipients

Answer

GDPR Article 30 requires RoPA to document categories of data, purposes, recipients, retention periods, and security measures, among other elements.

Question 2

What is the PRIMARY purpose of data pseudonymization compared to anonymization?

Accepted Answer

Pseudonymization is reversible and still subject to data protection laws

Answer

Pseudonymized data can be re-identified with additional information and therefore remains personal data subject to privacy regulations, unlike truly anonymized data.

Question 3

Which technique adds statistical noise to query results to prevent inference of individual records in a dataset?

Accepted Answer

Differential privacy

Answer

Differential privacy adds calibrated noise to outputs so that the presence or absence of any individual's data cannot be determined from the results.

Question 4

Under CCPA, which right allows California consumers to obtain a copy of the personal information a business has collected about them?

Accepted Answer

Right to know

Answer

The CCPA Right to Know allows consumers to request disclosure of what personal information a business has collected, used, disclosed, or sold about them.

Question 5

A CDPSE is assessing a biometric authentication system. Which privacy risk is UNIQUE to biometric data compared to passwords?

Accepted Answer

Biometric identifiers cannot be changed if compromised

Answer

Unlike passwords, biometric identifiers such as fingerprints or iris scans cannot be reset if exposed, making a breach permanently harmful to the individual.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE CDPSE 4