CDPSE Personal Practice Questions

Which of the following is the BEST indication of an effective records management program for personal data?

• AA. Archived data is used for future analytics.
• BB. The legal department has approved the retention policy.
• CC. All sensitive data has been tagged.
• DD. A retention schedule is in place.

Which of the following vulnerabilities is MOST effectively mitigated by enforcing multi-factor authentication to obtain access to personal information?

• AA. End users using weak passwords
• BB. Organizations using weak encryption to transmit data
• CC. Vulnerabilities existing in authentication pages
• DD. End users forgetting their passwords

An organization has a policy requiring the encryption of personal data if transmitted through email. Which of the following is the BEST control to ensure the effectiveness of this policy?

• AA. Provide periodic user awareness training on data encryption.
• BB. Implement a data loss prevention (DLP) tool.
• CC. Conduct regular control self-assessments (CSAs).
• DD. Enforce annual attestation to policy compliance.

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructured data as a major risk. What should be done FIRST to address this situation?

• AA. Identify sensitive unstructured data at the point of creation.
• BB. Classify sensitive unstructured data.
• CC. Identify who has access to sensitive unstructured data.
• DD. Assign an owner to sensitive unstructured data.