Objective 3.1 Identify and Mitigate Privacy Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   An organization wants to identify privacy risks associated with a new system that will process personal data. Which method is most appropriate for this purpose?

   • AMarketing analysis
   • BFirewall configuration review
   • CEmployee background check
   • DPrivacy impact assessment (PIA)
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which mitigation strategy involves limiting the collection of personal data to only what is necessary for a specific purpose?

   • AData encryption
   • BAccess control
   • CData anonymization
   • DData minimization
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A city government is deploying smart parking meters that collect license plate images, payment card details, and location data. The city wants to assess the privacy risks of this new system before rollout. Which method would best identify the risks associated with the collection and processing of this data?

   • AConduct a privacy impact assessment that evaluates the data flows, purposes, and potential harms.
   • BPublish a privacy policy on the city's website.
   • CDeploy a data loss prevention system to monitor the payment network.
   • DEncrypt all data collected by the parking meters.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which method is specifically designed to systematically evaluate how personal data flows through an organization's systems and identify where privacy risks may arise?

   • AVulnerability scanning
   • BLog review
   • CPenetration testing
   • DData flow analysis
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A multinational e-commerce company needs to ensure that website visitors from the EU can easily manage their consent preferences for cookies and marketing tracking. The company also wants to maintain a clear audit trail of when and how consent was given. Which tool would best meet both requirements?

   • AA data loss prevention system that monitors outbound network traffic.
   • BA privacy management software suite that tracks data subject access requests.
   • CA web application firewall that blocks malicious traffic to the site.
   • DA consent management platform that provides user-facing preference controls and logs consent events.
   Reveal Solution Discussion Select an answer first