Data Inventory, Dataflow Diagram, and Classification CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A privacy team has completed a data inventory and classification for a hospital. The team now needs to update the dataflow diagrams to reflect the classification of patient data. The diagrams currently show the flow of patient data between the EHR system, the lab system, and the billing system. What is the most effective way to integrate classification into the DFDs?

   • AAnnotate the data flows in the DFDs with the classification label of the data being transferred.
   • BOnly update the DFDs for the highest classification level and ignore lower levels.
   • CRemove the classification labels from the inventory and rely solely on the DFDs.
   • DCreate a separate DFD for each classification level to avoid mixing sensitivity levels.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A retail company is investigating a potential data breach involving customer payment information. The security team needs to understand every system and process that touches this data, including where it is stored, how it moves between systems, and where it is transformed. Which documentation artifact will most directly support this investigation?

   • AA dataflow diagram showing the movement of payment data from the point-of-sale system through processing and storage.
   • BAn organizational chart showing which teams have access to the payment systems.
   • CA list of all database backups and their retention schedules.
   • DA network topology diagram showing the physical and logical connections between servers and devices.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following best defines data classification?

   • AThe process of removing personal identifiers from data
   • BThe process of storing data in different physical locations
   • CThe process of converting data into a coded format
   • DThe process of categorizing data according to its sensitivity and impact
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A software company is implementing a data classification scheme. The privacy team needs to assign a sensitivity level to a dataset containing the names and email addresses of customers who have opted into a public newsletter. The dataset is also used internally for marketing analytics. Which classification is most appropriate for this dataset?

   • AConfidential, because it contains personal data that must be protected at all costs.
   • BRestricted, because any personal data requires the highest level of protection.
   • CPublic, because the data was voluntarily provided for a public newsletter.
   • DInternal, because the data is used for internal marketing analytics and is not intended for public release.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which symbol in a dataflow diagram represents a data store?

   • ACircle
   • BArrow
   • CRectangle
   • DTwo parallel lines
   Reveal Solution Discussion Select an answer first