CIPT Privacy by Design and Engineering 2

Question 1

A privacy engineer is asked to implement a technique that replaces real user identifiers with pseudonyms in a dataset. What technique is being used?

Accepted Answer

Pseudonymization

Answer

Anonymization

Answer

Tokenization of payment data

Answer

Data masking for testing

Question 2

Which engineering technique adds statistical noise to datasets to protect individual privacy while preserving overall data utility?

Accepted Answer

Differential privacy

Answer

Homomorphic encryption

Answer

Access control lists

Answer

Data tokenization

Question 3

A company wants to allow third-party analysis of its customer database without revealing individual records. Which technique best enables this?

Accepted Answer

Homomorphic encryption

Answer

Transport Layer Security

Answer

Role-based access control

Answer

Multi-factor authentication

Question 4

In the context of Privacy by Design, what is a 'privacy impact assessment' (PIA) primarily used for during system development?

Accepted Answer

Identifying and mitigating privacy risks before system deployment

Answer

Documenting data breaches after they occur

Answer

Auditing user consent records quarterly

Answer

Measuring website analytics performance

Question 5

What is the primary purpose of data minimization as a privacy engineering control?

Accepted Answer

Collect only the data necessary for the specified purpose

Answer

Reduce storage costs by compressing files

Answer

Delete all data older than 90 days

Answer

Minimize the number of database tables

Question 6

Which concept describes designing systems so that a user's identity is not required to access a service when only a credential or attribute is needed?

Accepted Answer

Identity minimization

Answer

Multi-factor authentication

Answer

Zero-trust architecture

Answer

Single sign-on