Question 1

The best first step in building privacy operations is:

Options :

A :

Perform a risk assessment.

B : Conduct a penetration test.

C :

Identify requirements.

D :

Perform data discovery.

Answer: C

Question 2

What are the categories of risk treatment?

Options :

A : Risk avoidance, risk transfer, risk mitigation, and risk acceptance

B : Risk avoidance, risk treatment, risk mitigation, and risk acceptance

C : Risk avoidance, risk reduction, risk transfer, risk mitigation, and risk acceptance

D : Risk avoidance, risk transfer, and risk mitigation

Answer: B

Question 3

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

Options :

A : Encrypt users' information so it is inaccessible to the marketing department.

B : Reference the privacy policy to see if the data is truly restricted.

C : Remove users' information and account from the system.

D : Flag users' email addresses to make sure they do not receive promotional information.

Answer: D

Question 4

Which of the following processes BEST enables an organization to maintain the quality of personal data?

Options :

A : Implementing routine automatic validation

B : Maintaining hashes to detect changes in data

C : Encrypting personal data at rest

D : Updating the data quality standard through periodic review

Answer: D

Question 5

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Options :

A : Data redaction

B : Data quality assurance (QA)

C : Irreversible disposal

D : Collection limitation

Answer: D