FREE CDPSE Certification MCQ Questions and Answers

Question 1

To record acts conducted with personal data, an organization is establishing a personal data processing register.
Which of the following categories should contain controls for the duration of personal data retention?

Accepted Answer

Data archiving

Answer

Data storage

Answer

Data input

Answer

Data acquisition

Question 2

The privacy notice of the organization may not apply to data gathered by a third-party vendor and returned to it by the organization. Which of the following approaches is BEST for dealing with this issue?

Accepted Answer

Validate contract compliance

Answer

Re-assess the information security requirements

Answer

Obtain independent assurance of current practices

Answer

Review the privacy policy

Question 3

Which of the following principles is MOST crucial when designing a role-based user access model for a new application to guarantee data privacy is protected?

Accepted Answer

Segregation of duties

Answer

Unique user credentials

Answer

Two-person rule

Answer

Need-to-know basis

Question 4

Which of the following needs to be created first before a privacy office creates a campaign to raise awareness of data protection and privacy?

Accepted Answer

Strategic goals of the organization

Answer

Detailed documentation of data privacy processes

Answer

Business objectives of senior leaders

Answer

Contract requirements for independent oversight

Question 5

Which of the following characteristics should be included in a company's technology stack in order to meet privacy standards relating to data subjects' rights to control their personal information?

Accepted Answer

Allowing individuals to have direct access to their data

Answer

Establishing a data privacy customer service bot for individuals

Answer

Allowing system administrators to manage data access

Answer

Providing system engineers the ability to search and retrieve data

Question 6

When using a cloud service provider to store and process data, which of the following is the GREATEST risk for an enterprise subject to cross-border data transfer regulations?

Accepted Answer

The data is stored in a region with different data protection requirements.

Answer

The extent of the service provider’s access to data has not been established.

Answer

Personal data stored on the cloud has not been anonymized.

Answer

The service provider has denied the organization’s request for right to audit.

Question 7

The following should be considered by an organization when configuring information systems for the transmission and storage of personal data:

Accepted Answer

review configuration settings for compliance

Answer

implement the least restrictive mode

Answer

adopt the default vendor specifications

Answer

enable essential capabilities only