Free Access ISACA.CDPSE.v2022-11-15.q41 Practice Test (Page 5)

Question 16

Which of the following is the BEST way for an organization to limit potential data exposure when implementing a new application?

A.Capture the application's authentication logs.

B.Encrypt all data used by the application.

C.Implement a data loss prevention (DLP) system.

D.Use only the data required by the application.

Question 17

A software development organization with remote personnel has implemented a third-party virtualized workspace to allow the teams to collaborate. Which of the following should be of GREATEST concern?

A.The organization's products are classified as intellectual property.

B.The third-party workspace is hosted in a highly regulated jurisdiction.

C.There is a lack of privacy awareness and training among remote personnel.

D.Personal data could potentially be exfiltrated through the virtual workspace.

Question 18

Which of the following BEST represents privacy threat modeling methodology?

A.Mitigating inherent risks and threats associated with privacy control weaknesses

B.Reliably estimating a threat actor's ability to exploit privacy vulnerabilities

C.Systematically eliciting and mitigating privacy threats in a software architecture

D.Replicating privacy scenarios that reflect representative software usage

Question 19

What type of personal information can be collected by a mobile application without consent?

A.Geolocation

B.Phone number

C.Accelerometer data

D.Full name

Question 20

Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

A.Use a third party to collect, store, and process the data.

B.Collect data through a secure organizational web server.

C.Collect only the data necessary to meet objectives.

D.Aggregate the data immediately upon collection.

Other Version: 773ISACA.CDPSE.v2024-02-19.q108; 1022ISACA.CDPSE.v2023-05-13.q39; 1110ISACA.CDPSE.v2022-06-20.q42; 1124ISACA.CDPSE.v2022-03-04.q43

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 155TheSecOpsGroup.CNSP.v2025-09-08.q20; 206CFAInstitute.ESG-Investing.v2025-09-08.q173; 153PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 140Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 176Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File