Data Privacy CRAGE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A research institute wants to share a dataset of medical images with multiple external collaborators to train a diagnostic model. The dataset contains rare diseases, making some records unique. The institute wants to protect patient privacy while maintaining data utility. Which combination of techniques is most appropriate?

   • ARemove all metadata from the images and share them directly.
   • BApply k-anonymity to the dataset and then use differential privacy when sharing model outputs.
   • CShare the data only with collaborators who sign a confidentiality agreement.
   • DUse homomorphic encryption to allow collaborators to compute on encrypted data.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A global company transfers personal data from the EU to a non-adequate country for AI model training. They have implemented standard contractual clauses (SCCs) and additional technical measures. Which additional measure would most effectively address the GDPR's requirement for 'essentially equivalent' protection?

   • AObtain consent from each data subject for the transfer.
   • BRely on the data importer's self-certification under a voluntary code of conduct.
   • CAnonymize the data before transfer, so GDPR does not apply.
   • DImplement end-to-end encryption of the data in transit and at rest, with key management held in the EU.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which statement best describes the principle of 'Privacy by Default'?

   • ASystem settings should be configured to provide the highest level of privacy protection without requiring user action.
   • BPrivacy is a default feature that can be turned off by the system administrator.
   • CPrivacy protections should be added only after a data breach occurs.
   • DUsers must opt in to privacy features each time they use the system.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which privacy-preserving technique allows multiple parties to collaboratively train a machine learning model without sharing their raw data?

   • ATokenization
   • BHomomorphic encryption
   • CFederated learning
   • DDifferential privacy
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the purpose of a privacy governance framework in an organization?

   • ATo establish policies, procedures, and accountability structures for managing privacy risks and ensuring compliance.
   • BTo replace the need for data security measures.
   • CTo maximize the collection of personal data for AI training.
   • DTo ensure that AI models achieve the highest possible accuracy.
   Reveal Solution Discussion Select an answer first