CDPSE 試験問題を無料オンラインアクセス

An organization has an initiative to implement database encryption to strengthen privacy controls. Which of the following is the MOST useful information for prioritizing database selection?

• A.Asset classification scheme
• B.Database administration audit logs
• C.Penetration test results
• D.Historical security incidents

Which of the following is the BEST way to ensure privacy considerations are included when working with vendors?

• A.Monitoring privacy-related service level agreements (SLAS)
• B.Requiring vendors to complete privacy awareness training
• C.Including privacy requirements in vendor contracts
• D.Including privacy requirements in the request for proposal (RFP) process

An IT privacy practitioner wants to test an application in pre-production that will be processing sensitive personal data. Which of the following testing methods is BEST used to identity and review the application's runtime modules?

• A.Dynamic application security testing (DAST)
• B.Software composition analysis
• C.Regression testing
• D.Static application security testing (SAST)

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

• A.Flag users' email addresses to make sure they do not receive promotional information.
• B.Remove users' information and account from the system.
• C.Encrypt users' information so it is inaccessible to the marketing department.
• D.Reference the privacy policy to see if the data is truly restricted.

Which of the following is the MOST important consideration when determining retention periods for personal data?

• A.Storage capacity available for retained data
• B.Sectoral best practices for the industry
• C.Notice provided to customers during data collection
• D.Data classification standards