A startup is building a serverless application using a cloud provider's function-as-a-service (FaaS) offering and a managed NoSQL database. The application processes user-submitted documents that contain personal data. The privacy team needs to ensure that the data is protected throughout its lifecycle. Which control is most important to implement?

Avoid using serverless functions because they are inherently less secure than VMs.

Use a single cloud provider for all services to simplify compliance.

Enable encryption at rest for the NoSQL database and encryption in transit for all API calls.

Store the documents in a public cloud storage bucket and rely on the provider's default settings.

Which of the following is a key step in developing an asset inventory for privacy purposes?

Encrypting all data in the organization.

Deleting all data that is not actively used.

Assigning a unique identifier to every employee.

Identifying all systems and applications that store or process personal data.

A multinational corporation has offices in the United States and the European Union. Employees in both regions need to access a centralized HR database that contains personal data of all employees. The privacy team is concerned about data transfers across borders. Which network architecture would best minimize data exposure while supporting the business need?

Set up a site-to-site VPN between the US and EU offices and route all database traffic through the VPN.

Allow employees to access the database directly over the internet using a web interface.

Replicate the database to a server in each region and synchronize them over the internet.

Use a remote desktop protocol (RDP) connection from each office to a single server in the US.

Which cloud service model provides the customer with the least control over the underlying infrastructure and applications?

IaaS (Infrastructure as a Service)

Certified Data Privacy Solutions Engineer

Domain 4Objective 1

Data Infrastructure and Technology CDPSE Practice Questions (Page 2)

Part of the Privacy Engineering domain, which accounts for 39% of the CDPSE exam.

41questions here

9free pages

14concepts

39%of the exam

Questions 6–10

6application · medium
A startup is building a serverless application using a cloud provider's function-as-a-service (FaaS) offering and a managed NoSQL database. The application processes user-submitted documents that contain personal data. The privacy team needs to ensure that the data is protected throughout its lifecycle. Which control is most important to implement?
Select an answer first
7foundation · easy
Which of the following is a key step in developing an asset inventory for privacy purposes?
Select an answer first
8foundation · easy
Which of the following endpoint devices typically has the most limited data processing and storage capabilities, yet can collect sensitive personal data?
Select an answer first
9application · medium
A multinational corporation has offices in the United States and the European Union. Employees in both regions need to access a centralized HR database that contains personal data of all employees. The privacy team is concerned about data transfers across borders. Which network architecture would best minimize data exposure while supporting the business need?
Select an answer first
10foundation · easy
Which cloud service model provides the customer with the least control over the underlying infrastructure and applications?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.

Data Infrastructure and Technology CDPSE Practice Questions (Page 2)

Questions 6–10

Which of the following is a key step in developing an asset inventory for privacy purposes?

Which of the following endpoint devices typically has the most limited data processing and storage capabilities, yet can collect sensitive personal data?

Which cloud service model provides the customer with the least control over the underlying infrastructure and applications?

Keep studying — Privacy Engineering