When tokenizing credit card data, what security practice should be employed with the original data before it is stored in a data lake?

• A.Classification
• B.Encoding
• C.Encryption
• D.Backup

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BEST assurance that a potential vendor is able to comply with privacy regulations and the organization's data privacy policy?

• A.Including mandatory compliance language in the request for proposal (RFP)
• B.Obtaining self-attestations from all candidate vendors
• C.Requiring candidate vendors to provide documentation of privacy processes
• D.Conducting a risk assessment of all candidate vendors

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST approach for a local office of a global organization faced with multiple privacy-related compliance requirements?

• A.Focus on developing a risk action plan based on audit reports.
• B.Focus on requirements with the highest organizational impact.
• C.Focus on global compliance before meeting local requirements.
• D.Focus on local standards before meeting global compliance.

Comment: *

Name: *

Email: *

Verification: *

When using anonymization techniques to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

• A.The key must be kept separate and distinct from the data it protects.
• B.The data must be protected by multi-factor authentication.
• C.The key must be a combination of alpha and numeric characters.
• D.The data must be stored in locations protected by data loss prevention (DLP) technology.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to ensure that application hardening is included throughout the software development life cycle (SDLC)?

• A.Require an annual internal audit of SDLC processes.
• B.Include qualified application security personnel as part of the process.
• C.Ensure comprehensive application security testing immediately prior to release.
• D.Require an annual third-party audit of new client software solutions.

Comment: *

Name: *

Email: *

Verification: *