Data Infrastructure and Technology CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a privacy risk associated with endpoint vulnerabilities?

   • AEndpoints automatically encrypt all data, so vulnerabilities do not matter.
   • BEndpoints are always protected by the cloud provider's security team.
   • CEndpoint vulnerabilities only affect the performance of the device, not privacy.
   • DVulnerabilities can be exploited to gain unauthorized access to personal data stored on the device.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services firm is decommissioning a legacy on-premises application that stored customer financial records in a proprietary database. The application has been running for 15 years, and the database administrator is unsure whether all data locations have been documented. The privacy team is planning the data disposal. What is the most critical first step to ensure privacy is maintained during decommissioning?

   • AMigrate the database to a cloud environment so the provider can handle secure deletion.
   • BPerform a comprehensive data inventory to locate all instances of the data, including backups, logs, and archives, before any disposal activity.
   • COverwrite the database files with random data and then delete the application from the server.
   • DPhysically destroy all servers that hosted the application to ensure no residual data remains.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A retail company exposes a public API that allows third-party partners to retrieve product information. The API does not currently require authentication. The privacy team is concerned that the API could be used to access customer data if a vulnerability is exploited. What is the most effective control to reduce this risk?

   • ARate-limit the API to prevent excessive requests from a single IP address.
   • BEncrypt the API responses using TLS to protect data in transit.
   • CRequire an API key for all requests and log all access attempts.
   • DMove the API to a private network so it is only accessible from internal systems.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a primary privacy risk when using public Wi-Fi networks?

   • APublic Wi-Fi automatically installs malware on connected devices.
   • BPublic Wi-Fi is always slower, which reduces data privacy.
   • CData transmitted can be intercepted by attackers on the same network.
   • DPublic Wi-Fi is owned by the government, so all data is monitored.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A hospital deploys Internet of Things (IoT) sensors in patient rooms to monitor vital signs. The sensors transmit data over Wi-Fi to a central server. A privacy impact assessment identifies that the sensor data is highly sensitive. Which combination of controls is most effective to protect this data in transit and at rest?

   • AUse a wired Ethernet connection for the sensors instead of Wi-Fi to eliminate wireless risks.
   • BRely on the hospital's firewall to protect the data, since the sensors are on an internal network.
   • CUse WPA2 encryption on the Wi-Fi network and store the data in a database with role-based access controls.
   • DUse WPA3 encryption on the Wi-Fi network, encrypt the data at rest, and implement strong authentication for the sensors and the server.
   Reveal Solution Discussion Select an answer first