CDPSE Enhancing Technologies 5

Question 1

A healthcare organization needs to share patient data with a pharmaceutical researcher. The data must remain in the healthcare org's environment while the researcher runs queries. Which technology best supports this?

Accepted Answer

A data clean room

Answer

A data clean room provides a controlled, neutral environment where queries can be run on data that never leaves the data owner's control, giving the researcher insights without raw data access.

Question 2

Which of the following correctly distinguishes pseudonymization from anonymization under GDPR?

Accepted Answer

Pseudonymized data is still personal data under GDPR because re-identification is possible with additional information

Answer

GDPR Recital 26 clarifies that pseudonymized data remains personal data because it can be re-identified using separately held information, while truly anonymized data falls outside GDPR scope.

Question 3

An organization implements a system where a user's identity is split into multiple cryptographic shares distributed across independent servers, so no single server can reconstruct the identity alone. This is an example of:

Accepted Answer

Secret sharing (e.g., Shamir's Secret Sharing)

Answer

Shamir's Secret Sharing and similar threshold schemes split a secret into shares such that only a quorum of shares (not any single one) can reconstruct the original value.

Question 4

Which PET approach would be MOST effective for a company that needs to publish a dataset for public research while ensuring that re-identification of individuals is computationally infeasible?

Accepted Answer

Combining differential privacy with generalization and suppression techniques

Answer

Combining differential privacy (probabilistic re-identification resistance) with generalization and suppression provides stronger, mathematically quantifiable privacy guarantees than simple identifier removal or low-k anonymization.

Question 5

In a privacy-preserving identity verification scenario, which technology allows a user to prove they are over 18 without revealing their exact date of birth?

Accepted Answer

Selective disclosure credentials using zero-knowledge proofs

Answer

Selective disclosure credentials with zero-knowledge proofs let users prove specific claims (e.g., age ≥ 18) derived from a credential without revealing the underlying attribute value.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Enhancing Technologies 5