CDPSE Technical Privacy Controls 2

Question 1

Which anonymization technique replaces actual values with fictional but realistic-looking substitutes that maintain referential integrity?

Accepted Answer

Tokenization

Answer

Tokenization replaces sensitive values with non-sensitive tokens that can be mapped back via a secure token vault, preserving referential integrity.

Question 2

A privacy engineer is implementing differential privacy. What is the primary mechanism used to protect individual records?

Accepted Answer

Adding calibrated statistical noise to query results

Answer

Differential privacy adds mathematically calibrated noise to outputs so that the inclusion or exclusion of any single record has negligible impact on results.

Question 3

What does the 'epsilon' parameter (ε) control in a differential privacy implementation?

Accepted Answer

The privacy-utility trade-off (lower = stronger privacy)

Answer

Epsilon (ε) is the privacy budget; a smaller ε means more noise is added, providing stronger privacy at the cost of data utility.

Question 4

An organization needs to share patient datasets with researchers while preventing re-identification. Which de-identification standard is mandated under HIPAA?

Accepted Answer

Expert Determination or Safe Harbor method

Answer

HIPAA provides two de-identification methods: Expert Determination (statistical verification) and Safe Harbor (removal of 18 specified identifiers).

Question 5

Which access control model is BEST suited for enforcing data minimization by granting access based on job function rather than individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions to roles tied to job functions, naturally limiting data access to what each role needs, supporting data minimization.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Technical Privacy Controls 2