Question 1

A privacy strategist has examined a business process and has determined that personnel who perform the process do so consistently, but

there is no written process document. The maturity level of this process is:

Options :

A : Initial

B : Managed

C : Repeatable

D : Defined

Answer: C

Question 2

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

Options :

A : Data tagging

B : Data normalization

C : Data mapping

D : Data hashing

Answer: C

Question 3

The best first step in building privacy operations is:

Options :

A :

Perform a risk assessment.

B : Conduct a penetration test.

C :

Identify requirements.

D :

Perform data discovery.

Answer: C

Question 4

Which party should data subject contact FIRST if they believe their personal information has been collected and used without consent?

Options :

A : Privacy rights advocate

B : Outside privacy counsel

C : Data protection authorities

D : The organization-s chief privacy officer (CPO)

Answer: C

Question 5

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

Options :

A : Encrypt users' information so it is inaccessible to the marketing department.

B : Reference the privacy policy to see if the data is truly restricted.

C : Remove users' information and account from the system.

D : Flag users' email addresses to make sure they do not receive promotional information.

Answer: D