QUESTION 181
When addressing privacy risks identified during risk assessment, which of the following is MOST important for ensuring the risk treatment plan is effective?

A. Updating the organization’s privacy policy to reflect current risks
B. Communicating the identified risks to all employees
C. Implementing data encryption for personal information
D. Assigning ownership and accountability for each identified risk

Correct Answer: D

QUESTION 182
Which of the following is the PRIMARY privacy advantage of an audit log?

A. Crash recovery
B. Improved response times
C. Incident detection
D. System troubleshooting

Correct Answer: C

QUESTION 183
Which of the following is the BEST way to minimize privacy risk in Al applications?

A. Implement algorithmic auditing.
B. Scrape data from the internet.
C. Use only publicly available data.
D. Apply federated learning.

Correct Answer: A

QUESTION 184
Which of the following is the FIRST step to protect data subject privacy when planning the deployment of a public monitoring system?

A. Draft a privacy breach response plan.
B. Inform the public of the project.
C. Conduct a privacy impact assessment (PIA).
D. Inform data protection authorities.

Correct Answer: C

QUESTION 185
Which of the following is the PRIMARY purpose of a privacy framework?

A. To enhance customer trust by guaranteeing the security of personal information
B. To streamline data collection processes to improve efficiency
C. To facilitate transparent use of personal information while ensuring accountability
D. To strengthen data security measures and prevent cyberattacks

Correct Answer: C

QUESTION 186
Which of the following is the MOST important privacy consideration to include in a policy on Al usage?

A. An incident response plan Is in place for the Al system.
B. Executive leadership has signed off on the use of the Al system.
C. Users are made aware that they are using an Al system.
D. Users have given their consent to use an Al system.

Correct Answer: D

QUESTION 187
Which of the following technologies has the potential to enhance consent tagging by providing a transparent and immutable record of consent transactions?

A. Forensic evidence
B. Chain of custody
C. Quantum computing
D. Blockchain

Correct Answer: D

QUESTION 188
Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

A. To evaluate effectiveness of data controls
B. To assess privacy risks
C. To determine data integration gaps
D. To comply with regulations

Correct Answer: B

QUESTION 189
Which of the following is a PRIMARY privacy advantage of a comprehensive asset management program?

A. Unused assets can be quickly identified and reallocated.
B. Outdated or unpatched software can be upgraded.
C. Asset depreciation can be tracked and values updated automatically.
D. Lost assets can be promptly deactivated and remotely wiped.

Correct Answer: D

QUESTION 190
Which of the following controls is MOST effective at mitigating data privacy risks associated with lost or stolen IT assets?

A. Effective patching processes for all devices
B. Comprehensive physical inventory checks
C. Strong password policies for all users
D. Encryption of data stored on portable devices

Correct Answer: D

QUESTION 191
What is the BEST way for an organization to ensure privacy requirements are maintained in the event an external party gains unauthorized access to a database holding personal data?

A. Encrypt the data in transit.
B. Require a digital signature.
C. Keep detailed server logs.
D. Encrypt the data at rest.

Correct Answer: D

QUESTION 192
When using pseudonymization to prevent unauthorized access to personal data, which of the following is the MOST important consideration to ensure the data is adequately protected?

A. The data must be protected by multi-factor authentication (MFA).
B. The identifier must be kept separate and distinct from the data it protects.
C. The key must be a combination of alpha and numeric characters.
D. The data must be stored in locations protected by data loss prevention (DLP) technology.

Correct Answer: B

QUESTION 193
Which of the following actions can MOST effectively ensure compliance with user preferences when processing personal data?

A. Training employees on the importance of respecting user consent
B. Storing user preferences in a central corporate repository
C. Requiring users to refresh their preferences each year
D. Implementing a consent management system

Correct Answer: D

QUESTION 194
A multinational corporation is planning a big data initiative to help with critical business decisions. Which of the following is the BEST way to ensure personal data usage IS standardized across the entire organization?

A. Perform data discovery.
B. De-identify all data.
C. Develop a data dictionary.
D. Encrypt all sensitive data.

Correct Answer: C

QUESTION 195
Which of the following BEST enables an organization to establish a comprehensive privacy risk management framework?

A. Providing adequate notice of privacy breaches to stakeholders
B. Leveraging industry standards and best practices
C. Leveraging existing privacy policies as a foundation
D. Ensuring appropriate metrics are established and monitored

Correct Answer: B

QUESTION 196
Which of the following is the BEST way for an organization to address privacy concerns when deploying machine learning (ML) models?

A. Using public cloud solutions for model hosting
B. Conducting regular Internet of Things (IoT) device firmware updates
C. Implementing access controls based on user roles
D. Employing differential privacy techniques during model training

Correct Answer: D

QUESTION 197
Which of the following is MOST important for an organization to review when evaluating privacy-enhancing technologies (PETS)?

A. Customer satisfaction levels
B. Existing data privacy architecture
C. Reduction of privacy risk
D. Cost and performance

Correct Answer: C

QUESTION 198
Which of the following is the GREATEST benefit of adopting data minimization practices?

A. Storage and encryption costs are reduced.

B. Compliance requirements are met
C. The associated threat surface is reduced
D. Data retention efficiency is enhanced.

Correct Answer: C

QUESTION 199
Before executive leadership approves a new data privacy policy, it is MOST important to ensure:

A. a distribution methodology is identified.
B. a legal review is conducted.
C. a training program is developed.
D. a privacy committee is established.

Correct Answer: B

QUESTION 200
Which of the following MOST effectively prevents unauthorized parties from logging into a remote access solution by using stolen credentials?

A. Hardening of the remote access solution gateway
B. Implementation of geo-blocking for high-risk countries
C. Use of complex password policies
D. Use of machine-based authentication as an additional factor

Correct Answer: D