Which of the following is the PRIMARY reason for an organization to use hash functions when hardening application systems involved in biometric data processing?

• A.To reduce the risk of sensitive data breaches
• B.To meet the organization's security baseline
• C.To ensure technical security measures are effective
• D.To prevent possible identity theft

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy strategy?

• A.Require data dictionaries from service providers that handle the organization's personal data.
• B.Outsource personal data processing to the same third party
• C.Require independent audits of the providers' data privacy controls
• D.Require service level agreements (SLAs) to ensure data integrity while safeguarding confidentiality

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST ensures an organization's data retention requirements will be met in the public cloud environment?

• A.Data classification schemes
• B.Automated data deletion schedules
• C.Cloud vendor agreements
• D.Service level agreements (SLAs)

Comment: *

Name: *

Email: *

Verification: *

A multi-national organization has decided that regional human resources (HR) team members must be limited in their access to employee data only within their regional office. Which of the following is the BEST approach?

• A.Discretionary access control (DAC)
• B.Attribute-based access control (ABAC)
• C.Provision-based access control (PBAC)
• D.Mandatory access control (MAC)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern for an organization subject to cross-border data transfer regulations when using a cloud service provider to store and process data?

• A.The extent of the service provider's access to data has not been established.
• B.The data is stored in a region with different data protection requirements.
• C.The service provider has denied the organization's request for right to audit.
• D.Personal data stored on the cloud has not been anonymized.

Comment: *

Name: *

Email: *

Verification: *