A mobile app developer wants to integrate a third-party analytics SDK into their app to track user behavior. The developer is concerned about the privacy risks of sharing user data with the third party. What is the most appropriate step to mitigate this risk?

Encrypt all data sent to the third-party SDK.

Ignore the risk because the SDK is from a reputable company.

Review the SDK's data collection practices and limit the data shared to only what is necessary for analytics.

Use a data loss prevention system on the user's device.

A multinational bank is launching a new mobile banking app that will collect biometric data (fingerprint and facial recognition) for authentication, along with transaction history and location data. The bank operates in multiple jurisdictions with varying privacy regulations. The privacy team must identify risks and implement mitigations before launch. They have limited time and budget. Which combination of actions would most effectively identify and mitigate the most critical privacy risks?

Conduct a privacy impact assessment, apply data minimization to biometric data, and implement strong access controls.

Publish a comprehensive privacy policy and obtain consent from all users.

Deploy a data loss prevention system and encrypt all data in transit and at rest.

Use a consent management platform and anonymize all transaction data.

A marketing agency collects customer email addresses for a newsletter. The agency later decides to use these email addresses to create lookalike audiences on a social media platform for targeted advertising. The original privacy policy did not mention advertising. What is the most appropriate mitigation to address this privacy risk?

Anonymize the email addresses before uploading them to the social media platform.

Encrypt the email addresses in the database to protect them from breaches.

Restrict access to the email list to only the marketing team.

Update the privacy policy and obtain fresh consent from customers for the new advertising use.

Which type of tool helps an organization track and honor individuals' choices about how their personal data may be used?

Intrusion detection system (IDS)

Data loss prevention (DLP) system

Encryption key management system

CertNexusCertified Ethical Emerging Technologist (CEET)

Domain 3Objective 1

Objective 3.1 Identify and Mitigate Privacy Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 1)

Part of the 3.0 Risk Identification and Mitigation domain, which accounts for 30% of the CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST exam.

24questions here

5free pages

4concepts

30%of the exam

Questions 1–5

1application · medium
A mobile app developer wants to integrate a third-party analytics SDK into their app to track user behavior. The developer is concerned about the privacy risks of sharing user data with the third party. What is the most appropriate step to mitigate this risk?
Select an answer first
2expert · hard
A multinational bank is launching a new mobile banking app that will collect biometric data (fingerprint and facial recognition) for authentication, along with transaction history and location data. The bank operates in multiple jurisdictions with varying privacy regulations. The privacy team must identify risks and implement mitigations before launch. They have limited time and budget. Which combination of actions would most effectively identify and mitigate the most critical privacy risks?
Select an answer first
3application · medium
A marketing agency collects customer email addresses for a newsletter. The agency later decides to use these email addresses to create lookalike audiences on a social media platform for targeted advertising. The original privacy policy did not mention advertising. What is the most appropriate mitigation to address this privacy risk?
Select an answer first
4foundation · easy
Which type of tool helps an organization track and honor individuals' choices about how their personal data may be used?
Select an answer first
5foundation · easy
Which mitigation strategy is most effective in protecting personal data from unauthorized access if a database is compromised?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST” is a trademark of its owner, used for identification only.

Objective 3.1 Identify and Mitigate Privacy Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 1)

Questions 1–5

A mobile app developer wants to integrate a third-party analytics SDK into their app to track user behavior. The developer is concerned about the privacy risks of sharing user data with the third party. What is the most appropriate step to mitigate this risk?

Which type of tool helps an organization track and honor individuals' choices about how their personal data may be used?

Which mitigation strategy is most effective in protecting personal data from unauthorized access if a database is compromised?

Keep studying — 3.0 Risk Identification and Mitigation