Free CDPSE Certification Questions and Answers

Question 1

Which of the following is regarded as an ideal event logging practice?

Accepted Answer

Transmit all event logs to a central log server

Answer

Encrypt all event logs on the systems that create them

Answer

Retain all event logs on the systems that create them

Answer

Suppress the creation of event logs on all systems

Question 2

Which of the following claims concerning compliance risk is accurate?

Accepted Answer

Compliance risk is just another risk that needs to be measured

Answer

Compliance risk can be tolerated when it is optional

Answer

Compliance risk can never be tolerated

Answer

Compliance risk can be tolerated when fines cost less than controls

Question 3

Which of the following, in terms of information security and privacy, would be considered the first line of defense?

Accepted Answer

Identification and authentication of users

Answer

Making back-up copies

Answer

Validation of data when entering an application

Answer

Control of changes to applications

Question 4

Which of the following BEST sums up data warehousing transformation rules? Norms for transformation are:

Accepted Answer

Minimal for the staging layer but more complex for the presentation layer.

Answer

Minimal for both the staging layer and presentation layer.

Answer

Complex for the staging layer but minimal for the presentation layer.

Answer

Complex for both the staging layer and presentation layer.

Question 5

What should a multinational company take into account FIRST before installing a user and entity behavior analytics (UEBA) technology to centralize the monitoring of out-of-the-ordinary staff activity?

Accepted Answer

Support staff availability and skill set

Answer

Global public interest

Answer

Cross-border data transfer

Answer

User notification

Question 6

When conducting a privacy impact assessment (PIA), which of the following should be the FIRST factor taken into account?

Accepted Answer

The systems in which privacy-related data is stored

Answer

The organizational security risk profile

Answer

The quantity of information within the scope of the assessment

Answer

The applicable privacy legislation

Question 7

Which of the following BEST exemplifies the methodology for modeling privacy threats?

Accepted Answer

Mitigating inherent risks and threats associated with privacy control weaknesses

Answer

Replicating privacy scenarios that reflect representative software usage

Answer

Reliably estimating a threat actor’s ability to exploit privacy vulnerabilities

Answer

Systematically eliciting and mitigating privacy threats in a software architecture