Data Minimization CDPSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What does a data flow map typically illustrate?

   • AThe movement of personal data through an organization, including collection, processing, and sharing
   • BThe network topology of the organization's IT systems
   • CThe organizational chart of the privacy team
   • DThe physical location of servers in a data center
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which metric would be most useful for auditing data minimization compliance?

   • AThe total storage capacity of the data center
   • BThe number of employees in the privacy team
   • CThe number of data breaches that occurred in the past year
   • DThe percentage of data fields in a system that are actually used for the stated purpose
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When sharing personal data with a third party, what is a key data minimization practice?

   • AShare the entire dataset to ensure the third party has all available information
   • BShare data without a contract to avoid legal complications
   • CShare data in its original format to avoid transformation errors
   • DShare only the minimum amount of personal data necessary for the third party to perform the service
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the core objective of the data minimization principle in privacy and data protection?

   • ATo guarantee that personal data is stored securely and protected from unauthorized access
   • BTo limit the collection and processing of personal data to what is adequate, relevant, and necessary for a specified purpose
   • CTo ensure that personal data is accurate and up to date throughout its lifecycle
   • DTo ensure that individuals have the right to access and correct their personal data held by an organization
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What should a data processing agreement (DPA) with a third party include to enforce data minimization?

   • AClauses that specify the types of data that can be processed and prohibit use beyond the agreed purpose
   • BA clause that requires the third party to retain data indefinitely for audit purposes
   • CA clause that allows the third party to share the data with its own subcontractors without restriction
   • DA clause that allows the third party to use the data for any purpose that benefits the organization
   Reveal Solution Discussion Select an answer first