Free Access to ISACA.CDPSE.v2024-03-22.q117 with Valid Practice Test (Page 20)

Question 91

A multinational corporation is planning a big data initiative to help with critical business decisions. Which of the following is the BEST way to ensure personal data usage is standardized across the entire organization?

A.Develop a data dictionary.
B.De-identify all data.
C.Perform data discovery.
D.Encrypt all sensitive data.

Question 92

An organization uses analytics derived from archived transaction data to create individual customer profiles for customizing product and service offerings. Which of the following is the IT privacy practitioner's BEST recommendation?

A.Discontinue the creation of profiles.
B.Implement strong access controls.
C.Encrypt data at rest.
D.Anonymize personal data.

Question 93

Which of the following is an IT privacy practitioner's BEST recommendation to reduce privacy risk before an organization provides personal data to a third party?

A.Tokenization
B.Aggregation
C.Anonymization
D.Encryption

Correct Answer: C

Explanation
Anonymization is a technique that removes or modifies all identifiers in a data set to prevent or limit the identification of the data subjects. Anonymization is an IT privacy practitioner's best recommendation to reduce privacy risk before an organization provides personal data to a third party, as it would protect the privacy of the data subjects by reducing the linkability of the data set with their original identity, and also comply with the data minimization principle that requires limiting the collection, storage and processing of personal data to what is necessary and relevant for the intended purposes. Anonymization would also preserve some characteristics or patterns of the original data that can be used for analysis or research purposes by the third party, without compromising the accuracy or quality of the results. The other options are not as effective as anonymization in reducing privacy risk before an organization provides personal data to a third party.
Tokenization is a technique that replaces sensitive or confidential data with non-sensitive tokens or placeholders that do not reveal the original data, but it does not prevent or limit the identification of the data subjects, as tokens can be reversed or linked back to the original data using a tokenization system or key.
Aggregation is a technique that combines individual data into groups or categories that do not reveal the identity of the data subjects, but it may not prevent or limit the identification of the data subjects, as aggregated data can be de-aggregated or re-identified using other sources of information or techniques. Encryption is a technique that transforms plain text data into cipher text using an algorithm and a key, making it unreadable by unauthorized parties, but it does not prevent or limit the identification of the data subjects, as encrypted data can be decrypted or linked back to the original data using an encryption system or key1, p. 74-75 References: 1: CDPSE Review Manual (Digital Version)

Question 94

A mortgage lender has created an online application that collects borrower information and delivers a mortgage decision automatically based on criteria set by the lender. Which fundamental data subject right does this process infringe upon?

A.Right to restriction of processing
B.Right to be informed
C.Right not to be profiled
D.Right to object

Question 95

An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

A.Data integrity and confidentiality
B.System use requirements
C.Data use limitation
D.Lawfulness and fairness

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File