Evidence and Artifacts CDPSE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A privacy investigator is collecting evidence for a potential regulatory action. The evidence includes emails and database logs stored on a server that is about to be decommissioned. The investigator must preserve the evidence while minimizing disruption to ongoing operations. What is the best approach?

   • APrint all the emails and logs and store them in a filing cabinet
   • BMake a forensic image of the server's storage and store it in a secure, access-controlled location
   • CCopy the relevant emails and logs to a USB drive and keep it in a desk drawer
   • DLeave the server running until the investigation is complete
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A privacy team must collect evidence to demonstrate that employees complete annual privacy training. The training platform can export completion reports, but the team also wants to verify that the reports are accurate. Which collection method is most appropriate to combine with the automated export?

   • ARequest a system-generated log of training sessions and compare it with the export
   • BConduct interviews with a sample of employees to ask if they remember the training content
   • CAsk the training platform vendor to provide a statement of compliance
   • DManually gather email acknowledgments from each employee
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A privacy team is conducting a periodic review of its evidence and artifacts. They find that the data inventory is missing several new data processing activities that were added in the last quarter. The team also finds that the privacy policy was updated but the change was not documented. What is the most appropriate action?

   • AUpdate the data inventory to include the new activities and document the privacy policy change
   • BNote the gaps in the review report but take no further action
   • CDelete the data inventory and recreate it from scratch
   • DWait until the next annual review to update the artifacts
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key characteristic of a well-created privacy artifact?

   • AIt is clear, accurate, and auditable
   • BIt is written in technical jargon to show expertise
   • CIt is brief and omits details to avoid confusion
   • DIt is created only after an audit to save time
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of evidence that would be used to demonstrate that a privacy control is operating effectively?

   • AAn access log showing who accessed personal data
   • BA privacy impact assessment report
   • CA data flow diagram
   • DA privacy policy document
   Reveal Solution Discussion Select an answer first