CDPSE Risk Management 4

Question 1

During a privacy risk assessment, what is the role of threat modeling?

Accepted Answer

To systematically identify actors, motivations, and attack vectors that could compromise personal data

Answer

Threat modeling in privacy risk assessment identifies who might misuse data, why, and how, enabling more targeted and effective risk treatment.

Question 2

An organization's privacy risk register has not been updated in 18 months. Which of the following risks is MOST likely to be understated as a result?

Accepted Answer

Risks from new regulatory requirements or business changes

Answer

A stale risk register fails to capture risks introduced by new regulations, business processes, or technology changes that occurred since the last update.

Question 3

Which framework explicitly requires organizations to conduct a Legitimate Interest Assessment (LIA) as part of privacy risk evaluation?

Accepted Answer

GDPR

Answer

GDPR requires a Legitimate Interest Assessment when processing is based on legitimate interests, to balance the controller's interests against the rights of data subjects.

Question 4

A CDPSE is conducting a privacy risk assessment for a machine learning model trained on customer purchase history. Which risk is UNIQUE to this type of processing?

Accepted Answer

Inference of sensitive attributes not explicitly provided by users

Answer

ML models can infer sensitive attributes (e.g., health status, political views) from seemingly innocuous behavioral data, creating a unique re-identification or inference risk.

Question 5

Which of the following BEST illustrates the concept of 'privacy harm' in risk assessment?

Accepted Answer

A data subject losing employment after medical data is disclosed to their employer

Answer

Privacy harm refers to real-world negative consequences suffered by individuals, such as economic loss, discrimination, or emotional distress resulting from misuse of their data.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Risk Management 4