Question 1

What are the categories of risk treatment?

Options :

A : Risk avoidance, risk transfer, risk mitigation, and risk acceptance

B : Risk avoidance, risk treatment, risk mitigation, and risk acceptance

C : Risk avoidance, risk reduction, risk transfer, risk mitigation, and risk acceptance

D : Risk avoidance, risk transfer, and risk mitigation

Answer: B

Question 2

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Options :

A : Data redaction

B : Data quality assurance (QA)

C : Irreversible disposal

D : Collection limitation

Answer: D

Question 3

Privacy governance is most concerned with:

Options :

A :

Privacy strategy

B : Security policy

C : Security executive compensation

D : Privacy policy

Answer: A

Question 4

An organization performs annual true-ups of its data inventory and finds numerous discrepancies. What change should be undertaken to

reduce or eliminate these discrepancies?

Options :

A : Increase the frequency of data inventory.

B : Automate the data inventory with daily scans.

C : Incorporate data inventory updates into the change management process.

D : Implement dynamic DLP.

Answer: B

Question 5

When configuring information systems for the communication and transport of personal data, an organization should:

Options :

A : adopt the default vendor specifications.

B : review configuration settings for compliance.

C : implement the least restrictive mode.

D : enable essential capabilities only.

Answer: B