Data Inventory, Dataflow Diagram, and Classification CDPSE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A privacy officer is reviewing a dataflow diagram for a customer data processing pipeline. The diagram shows data flowing from a web form to a CRM, then to a data warehouse, and finally to a marketing analytics tool. The officer notices that the diagram does not show any processes between the CRM and the data warehouse. What is the most likely implication of this omission?

   • AThe diagram is incorrect because data must always pass through a process before entering a data store.
   • BThe diagram is complete because the data warehouse is the final destination and no further processing is needed.
   • CThe diagram may be incomplete because data transformations often occur between systems and should be documented.
   • DThe diagram is correct because data can flow directly between systems without any processing.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A privacy analyst is reviewing the data inventory for a hospital. The inventory lists the patient records system, the data owner, and the storage location, but it does not indicate whether the records contain diagnosis codes, lab results, or only demographic information. Which component of the data inventory is missing?

   • AData elements
   • BData format
   • CStorage location
   • DData owner
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of a dataflow diagram (DFD) in privacy management?

   • ATo define the security controls for each system
   • BTo store the actual data being processed
   • CTo visualize the movement of data across systems and processes
   • DTo list all data assets in the organization
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A privacy officer is reviewing a dataflow diagram for a customer support process. The diagram shows that customer data flows from the support portal to a ticketing system, then to a CRM, and finally to a data warehouse for analytics. The officer wants to identify where the data is transformed. Which element of the DFD should the officer look for?

   • AThe arrows that show the direction of data movement between systems.
   • BProcesses that are connected by data flows between the systems.
   • CData stores that hold the data at rest in each system.
   • DExternal entities that send or receive data from the systems.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What criterion is commonly used to assign a data classification level?

   • AThe age of the data
   • BThe potential impact of unauthorized disclosure
   • CThe storage capacity of the data repository
   • DThe number of users accessing the data
   Reveal Solution Discussion Select an answer first