Data Analytics (Aggregation, AI, Data Warehouse) CDPSE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A research institute aggregates survey data from multiple studies to analyze public health trends. The aggregated dataset includes age, gender, occupation, and medical conditions. The institute plans to release the dataset publicly. Which additional measure is essential before public release?

   • APublish the dataset with a disclaimer that it is for research purposes only.
   • BObtain consent from all participants after aggregation.
   • CConduct a re-identification risk assessment on the aggregated dataset.
   • DRemove the dataset from public access after one year.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a privacy risk associated with data aggregation?

   • ASlower query performance
   • BRe-identification of individuals from combined datasets
   • CIncreased data storage costs
   • DData loss during backup
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A multinational corporation is designing a data warehouse to support global sales analytics. The warehouse will consolidate data from regional ERP systems. The privacy team requires that personal data of EU residents be processed in a manner that complies with GDPR. Which architectural choice best supports this requirement?

   • AConsolidate all data into a single global warehouse located in the United States.
   • BEncrypt all data in the warehouse and rely on encryption as the sole compliance measure.
   • CDeploy separate data warehouse instances in each region and aggregate only non-personal, aggregated statistics centrally.
   • DUse a data lake instead of a data warehouse to avoid GDPR obligations.
   Reveal Solution Discussion Select an answer first
5. 34expert · medium

   A large e-commerce company uses AI to personalize marketing campaigns. The AI model was trained on customer data including purchase history and browsing behavior. A data protection authority has questioned the lawfulness of the processing. The company wants to continue using the AI but must demonstrate compliance. Which action is most important to establish accountability?

   • AAppoint a data protection officer (DPO) if not already in place.
   • BRetrain the model with anonymized data only.
   • CConduct a data protection impact assessment (DPIA) for the AI processing.
   • DDelete all customer data older than one year.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A university is developing an AI system to predict student dropout risk. The system will use academic records, attendance, and demographic data. The privacy office requires that students be informed about the processing and that they can contest automated decisions. Which practice should be implemented?

   • AProvide clear notices about the AI system's purpose and ensure a human review process for significant decisions.
   • BAutomatically enroll at-risk students in intervention programs without human review.
   • CUse only demographic data to train the model.
   • DKeep the AI system's logic confidential to prevent gaming.
   Reveal Solution Discussion Select an answer first