CDPSE Technical Privacy Controls 5

Question 1

Which technique allows a dataset to be shared while ensuring that no combination of attributes can uniquely identify an individual by guaranteeing at least k records share each combination of quasi-identifiers?

Accepted Answer

k-anonymity

Answer

k-anonymity ensures each record is indistinguishable from at least k-1 others based on quasi-identifier combinations, reducing re-identification risk.

Question 2

A privacy engineer notes that a k-anonymized dataset still reveals sensitive attribute values through homogeneity attack. Which enhancement addresses this?

Accepted Answer

Applying l-diversity to ensure diversity of sensitive values within each equivalence class

Answer

l-diversity extends k-anonymity by requiring that each equivalence class contains at least l well-represented distinct sensitive values, preventing homogeneity attacks.

Question 3

An organization deploys federated learning for a machine learning model trained on personal health data across multiple hospitals. What is the PRIMARY privacy advantage over centralized training?

Accepted Answer

Raw personal data never leaves each hospital's local environment

Answer

Federated learning trains on local data at each node and shares only model updates (gradients), so raw personal health records are never centralized.

Question 4

A privacy engineer is reviewing cookie consent implementation. Which technical configuration ensures that a session cookie is not accessible to JavaScript (mitigating XSS-based cookie theft)?

Accepted Answer

Setting the HttpOnly attribute on the cookie

Answer

The HttpOnly flag instructs the browser not to expose the cookie to JavaScript APIs, preventing XSS scripts from stealing session cookies containing user identity.

Question 5

What is the primary privacy risk associated with embedding third-party fonts, scripts, or pixels directly from external CDNs in a web application?

Accepted Answer

The user's IP address and browser fingerprint are exposed to the third-party server on each page load

Answer

Each request to an external CDN reveals the user's IP address, referrer URL, and browser details to the third party, enabling tracking without the user's knowledge.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Technical Privacy Controls 5