Data Infrastructure and Technology CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary role of an API (Application Programming Interface) in data exchange?

   • ATo provide a user interface for humans to interact with software.
   • BTo encrypt all data transmitted between systems.
   • CTo store large amounts of data in a structured format.
   • DTo allow different software applications to communicate and exchange data with each other.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare startup is migrating its patient-facing appointment system to the cloud. They will use a vendor-managed customer relationship management (CRM) platform that includes patient contact details, and they will build a custom analytics pipeline using a cloud provider's managed database service. The startup's privacy team needs to understand where their data-privacy responsibilities lie under this architecture. Which statement accurately describes the division of responsibility?

   • AThe startup has no privacy obligations for the CRM data because the vendor is a data controller, while the startup is only a data processor for the analytics pipeline.
   • BThe CRM vendor is fully responsible for the privacy of patient data because they manage the entire platform, including the underlying infrastructure.
   • CThe startup retains privacy responsibility for patient data in both the CRM and the custom analytics pipeline, but the specific controls they can implement differ between the two services.
   • DThe startup must deploy the CRM in a private cloud to maintain any privacy control, since public cloud SaaS cannot meet healthcare data protection requirements.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which wireless technology is most vulnerable to eavesdropping because it transmits data over short distances without encryption by default?

   • AEthernet
   • BCellular (4G/5G)
   • CBluetooth
   • DFiber optic
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A global company is adopting a cloud ERP system (SaaS) and must comply with data residency requirements in multiple countries, including a requirement that citizen data remain within the country's borders. The vendor offers data residency options in several regions. The company also needs to integrate the ERP with an on-premises legacy system. Which approach best balances compliance and operational needs?

   • AUse a private cloud deployment to ensure all data remains under the company's control, avoiding public cloud residency issues.
   • BConfigure the ERP to store data in the region that matches each country's residency requirement, and use a hybrid integration to connect the on-premises system.
   • CNegotiate with the vendor to store all data in the company's home country and rely on the vendor's global support.
   • DSelect a single cloud region that is geographically central to all operations and use a VPN for all connections.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Why do APIs introduce privacy implications in data exchange?

   • AAPIs can expose personal data to unauthorized parties if not properly secured.
   • BAPIs automatically anonymize all data they transmit.
   • CAPIs are always public, so any data sent through them is accessible to anyone.
   • DAPIs are only used for non-sensitive data, so privacy is not a concern.
   Reveal Solution Discussion Select an answer first