Data Inventory, Dataflow Diagram, and Classification CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following best describes a data inventory?

   • AA policy document defining data retention periods
   • BA record of all data assets, including their metadata and associated details
   • CA diagram showing the flow of data between systems
   • DA list of all software applications used by the organization
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What does an arrow in a dataflow diagram represent?

   • AAn external entity that provides data
   • BA data store where data is held
   • CA process that transforms data
   • DA data flow between two components
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a benefit of using a dataflow diagram in privacy impact assessments?

   • AIt automatically encrypts data in transit
   • BIt ensures compliance with all data protection regulations
   • CIt helps identify all locations where personal data is stored and processed
   • DIt replaces the need for a data inventory
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the first step in creating a data inventory?

   • AData classification
   • BData discovery
   • CData retention scheduling
   • DData anonymization
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A privacy manager is implementing a data classification scheme for a large enterprise. The marketing team wants to classify customer purchase history as 'internal', while the legal team argues it should be 'confidential' because it contains personal data. The data is used for targeted advertising and is shared with a third-party analytics vendor. Which classification is most appropriate?

   • APublic, because the data is used for advertising that reaches many customers.
   • BInternal, because the data is used for routine marketing activities and is not publicly released.
   • CConfidential, because the data contains personal data and is shared with a third party, increasing the impact of disclosure.
   • DRestricted, because any data shared with a third party must be classified at the highest level.
   Reveal Solution Discussion Select an answer first