Data Inventory, Dataflow Diagram, and Classification CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A multinational corporation has completed a data inventory and assigned classification labels to its data assets. The privacy team now wants to ensure that the classification is consistently applied and maintained as new systems are added. Which ongoing practice is most effective?

   • ARequire all new data assets to be registered in the inventory with a classification label before they are deployed.
   • BStore the classification labels only in the dataflow diagrams, not in the inventory.
   • CConduct a one-time review of the inventory and classification at the end of each fiscal year.
   • DRely on the IT department to classify data assets based on their technical knowledge.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How should data classification be integrated into a data inventory?

   • ABy encrypting the inventory file
   • BBy including the classification level as a field for each data asset
   • CBy storing the classification scheme in a separate database
   • DBy replacing the data inventory with a classification report
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A privacy analyst is maintaining a data inventory for a global company. The inventory currently lists the data owner, storage location, and format for each asset. The analyst discovers that some assets have multiple owners in different regions, and the classification labels are inconsistent between regions. Which action is most important to improve the inventory's reliability?

   • ARemove the classification labels from the inventory to avoid inconsistencies.
   • BStandardize the classification labels and assign a single accountable owner for each data asset.
   • CAdd more storage locations to the inventory for each asset.
   • DCreate a separate inventory for each region to reflect local practices.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A financial services firm is defining classification criteria for its data assets. The team is debating how to classify a database containing customer account balances and transaction history. Which criterion should be the primary driver for classifying this data as 'confidential'?

   • AThe age of the data in the database.
   • BThe number of employees who need access to the data.
   • CThe potential impact on customers and the firm if the data were disclosed.
   • DThe volume of records in the database.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of a data inventory in an organization?

   • ATo catalog and describe the organization's data assets, including their locations, owners, and formats
   • BTo store backup copies of all organizational data in a secure repository
   • CTo enforce access control policies on all data assets
   • DTo replace the need for data classification by listing all data assets
   Reveal Solution Discussion Select an answer first