Free CDPSE Exam Braindumps (page: 22)

Page 22 of 56

Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?

  1. To identify controls to mitigate data privacy risks
  2. To classify personal data according to the data classi cation scheme
  3. To assess the risk associated with personal data usage
  4. To determine the service provider's ability to maintain data protection controls

Answer(s): C



Which of the following protocols BEST protects end-to-end communication of personal data?

  1. Transmission Control Protocol (TCP)
  2. Transport Layer Security Protocol (TLS)
  3. Secure File Transfer Protocol (SFTP)
  4. Hypertext Transfer Protocol (HTTP)

Answer(s): B



An organization is planning a new implementation for tracking consumer web browser activity.
Which of the following should be done FIRST?

  1. Seek approval from regulatory authorities.
  2. Conduct a privacy impact assessment (PIA).
  3. Obtain consent from the organization's clients.
  4. Review and update the cookie policy.

Answer(s): C



Which of the following is the BEST control to secure application programming interfaces (APIs) that may contain personal information?

  1. Encrypting APIs with the organization's private key
  2. Requiring nondisclosure agreements (NDAs) when sharing APIs
  3. Restricting access to authorized users
  4. Sharing only digitally signed APIs

Answer(s): C



Page 22 of 56



Post your Comments and Discuss ISACA CDPSE exam with other Community members:

noni commented on November 23, 2023
looking forward to it
Anonymous
upvote