Objective 3.1 Identify and Mitigate Privacy Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 5)

Questions 21–24

1. 21expert · hard

   A government agency is implementing a new system that collects citizens' data from multiple sources, including tax records, social services, and driver's license databases. The agency must identify privacy risks before the system goes live. The project has a tight deadline, and the agency has limited privacy expertise in-house. Which approach would most effectively identify the privacy risks within the constraints?

   • AUse a privacy management software tool to automate the risk assessment process.
   • BConduct a quick internal review of the system's data flows by the IT team.
   • CDefer the privacy assessment until after the system is launched.
   • DHire an external privacy consultant to conduct a comprehensive privacy impact assessment.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large e-commerce company is facing increasing regulatory scrutiny over its data handling practices. The company collects customer data from multiple sources, including website visits, purchase history, and customer support interactions. The privacy team must implement a solution to manage consent across all these channels and provide a unified view of customer preferences. The company also needs to demonstrate compliance to regulators. Which solution would best meet these needs?

   • AAnonymize all customer data to eliminate the need for consent management.
   • BImplement a data loss prevention system to monitor all data transfers.
   • CConduct a one-time privacy impact assessment and document the findings.
   • DDeploy a centralized consent management platform that integrates with all data collection points and logs consent events.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool is specifically designed to monitor and prevent unauthorized transmission of sensitive data outside an organization's network?

   • APrivacy management software
   • BData loss prevention (DLP) system
   • CFirewall
   • DConsent management platform
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   An organization is reviewing its data handling practices to identify potential privacy risks. Which of the following is a common source of privacy risk?

   • AEncrypting personal data both in transit and at rest
   • BCollecting only the minimum personal data needed for a service
   • CConducting regular privacy impact assessments
   • DSharing personal data with a third-party vendor without a data processing agreement
   Reveal Solution Discussion Select an answer first