Data Minimization CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of a data inventory?

   • ATo provide a list of all employees who have access to personal data
   • BTo serve as a legal document for regulatory authorities
   • CTo store backup copies of all personal data in a secure location
   • DTo document what personal data an organization holds, where it resides, and how it flows
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In the context of privacy by default, what should the default settings of a new application be?

   • ASettings that collect all available data but allow users to opt out later
   • BSettings that match the industry average for data collection
   • CThe most convenient settings, collecting as much data as possible to improve user experience
   • DThe most privacy-friendly settings, collecting the least amount of data
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which method is considered a secure way to dispose of personal data stored on a physical hard drive?

   • ADeleting the files and emptying the recycle bin
   • BMoving the drive to a storage closet for later use
   • CPhysically destroying the drive or using certified data destruction software
   • DReformatting the drive once
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A smart home device manufacturer is designing a new product that collects audio data to enable voice commands. The marketing team wants to collect audio data continuously to improve voice recognition algorithms. The privacy team wants to apply privacy by design and default. The product must still function effectively for voice commands. Which design choice best balances functionality and data minimization?

   • AProcess audio locally but store all audio snippets on the device for potential future use.
   • BTransmit all audio to the cloud and use it to improve the voice recognition algorithm by default.
   • CTransmit all audio to the cloud for processing, but delete the recordings after 30 days.
   • DDesign the device to process audio locally and only transmit audio snippets to the cloud when a wake word is detected, with the default setting being to not store any audio recordings.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which technique is most effective for limiting the collection of personal data in an online form?

   • AUsing pre-filled fields based on previous interactions
   • BMarking optional fields and only requiring data that is essential for the service
   • CMaking all fields mandatory to ensure complete data
   • DIncluding hidden fields to capture additional data without user awareness
   Reveal Solution Discussion Select an answer first