CDPSE 無料問題集「ISACA Certified Data Privacy Solutions Engineer」

（A）Review the findings of a third-party privacy control assessment

（B）Review the findings of an industry benchmarking assessment

（C）Identify trends in the organization's number of privacy incidents.

（D）Identify trends in the organization's amount of compromised personal data

（A）Available technology platforms

（B）Applicable control frameworks

（C）Applicable privacy legislation

（A）Allowing system administrators to manage data access

（B）Providing system engineers the ability to search and retrieve data

（C）Establishing a data privacy customer service bot for individuals

（D）Allowing individuals to have direct access to their data

（A）Evaluate new data loss prevention (DLP) tools.

（B）Suppress the alerts generating the false positives.

（C）Re-establish baselines tor configuration rules

（D）Conduct additional discovery scans.

（A）Data custodian

（B）Data processor

（C）Data owner

（D）Privacy data analyst

（A）Compliance requirements are met.

（B）Storage and encryption costs are reduced.

（C）Data retention efficiency is enhanced.

（D）The associated threat surface is reduced.

（A）To assess the risk associated with personal data usage

（B）To classify personal data according to the data classification scheme

（C）To determine the service provider's ability to maintain data protection controls

（D）To identify controls to mitigate data privacy risks

（A）The data security policies and practices of the storage provider

（B）Any vulnerabilities identified in the cloud system

（C）The data recovery capabilities of the storage provider

（D）The organization's potential legal liabilities related to the data

（A）Ensure logging is turned on for the database

（B）Determine the categories of personal data collected

（C）Encrypt the data at rest and in motion

（D）Remove the identifiers during the data transfer

（A）Data catalog vocabulary

（B）Logical data model

（C）Data normalization

（D）Data anonymization

（A）Industry guidelines

（B）Applicable regulations

（C）Cost-benefit analysis

（D）Data classification rules

（A）Conduct a benchmarking analysis.

（B）Perform a control self-assessment (CSA).

（C）Conduct an audit.

（D）Report performance metrics.

（A）Vulnerabilities existing in authentication pages

（B）Organizations using weak encryption to transmit data

（C）End users using weak passwords

（D）End users forgetting their passwords

（A）Third-party service level agreement (SLA) data is not always available.

（B）The organization's data retention schedule is complex.

（C）Availability of application data flow diagrams is limited.

（D）Logging of systems and application data is limited.

（A）Conduct penetration testing

（B）Implement application hardening measures.

（C）Provide the app only through official app stores

（D）Define the mobile app privacy policy.

（A）To comply with consumer regulatory requirements

（B）To classify personal data

（C）To establish privacy breach response procedures

（D）To understand privacy risks