Question 1

Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?

Options :

A : The user-s ability to select, filter, and transform data before it is shared

B : Umbrella consent for multiple applications by the same developer

C : User consent to share personal data

D : Unlimited retention of personal data by third parties

Answer: C

Question 2

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is the

first step that an online social media vendor should take?

Options :

A :

Wait until there is sufficient case law to see whether the law is enforceable.

B : Wait until the law takes effect to begin making changes to systems.

C : Retain expert privacy counsel to opine on applicability and interpretation.

D : Direct developers to make changes to the system to comply with the new law.

Answer: C

Question 3

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Options :

A : Privacy rights advocate

B : Outside privacy counsel

C : Data protection authorities

D : The organization-s chief privacy officer (CPO)

Answer: C

Question 4

A security manager is performing a risk assessment on a data center. The security manager has determined that unauthorized personnel can enter the data center through the loading dock door and shut off utility power to the building. This finding is known as a:

Options :

A : Vulnerability

B : Threat

C : Risk

D : Probability

Answer: B

Question 5

Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?

Options :

A : Perform a privacy risk audit.

B : Conduct a privacy risk assessment.

C : Validate a privacy risk attestation.

D : Conduct a privacy risk remediation exercise.

Answer: A