What is the purpose of a retention schedule for privacy artifacts?

To define how long artifacts must be kept and when they should be disposed of

To make artifacts available to all employees

To assign ownership of each artifact

To ensure artifacts are stored in a secure location

A privacy team needs to collect evidence of vendor compliance with data processing agreements. The team has access to a vendor portal that provides automated compliance reports, but the reports are only generated quarterly. The team also has email correspondence with the vendor. What is the most appropriate collection method?

Conduct interviews with vendor staff to verify compliance

Use the automated quarterly reports as the primary evidence and supplement with emails for any issues

Rely solely on email correspondence to avoid missing any details

Manually compile a summary of vendor compliance from memory

What is the primary purpose of maintaining a chain of custody for evidence in a privacy investigation?

To document who handled the evidence and when, to support its integrity and admissibility

To reduce the volume of evidence collected

To ensure evidence is stored in a secure location

To make evidence easier to search and retrieve

During a periodic review of artifacts, a privacy team discovers that a data retention policy has been updated, but the artifact documenting the policy has not been updated. What is the most appropriate action?

Wait until the next audit to update the artifact

Update the artifact to reflect the new policy and note the date of the update

Delete the old artifact and create a new one from scratch

Leave the artifact as is, since the policy is documented elsewhere

When analyzing evidence to assess compliance with a privacy requirement, what is the first step an analyst should take?

Identify the specific privacy requirement or control being assessed

Interview all employees involved in the process

Create a remediation plan for any gaps found

Collect as much evidence as possible

Certified Data Privacy Solutions Engineer

Domain 2Objective 7

Evidence and Artifacts CDPSE Practice Questions (Page 2)

Part of the Privacy Risk Management and Compliance domain, which accounts for 18% of the CDPSE exam.

37questions here

8free pages

9concepts

18%of the exam

Questions 6–10

6foundation · easy
What is the purpose of a retention schedule for privacy artifacts?
Select an answer first
7application · medium
A privacy team needs to collect evidence of vendor compliance with data processing agreements. The team has access to a vendor portal that provides automated compliance reports, but the reports are only generated quarterly. The team also has email correspondence with the vendor. What is the most appropriate collection method?
Select an answer first
8foundation · easy
What is the primary purpose of maintaining a chain of custody for evidence in a privacy investigation?
Select an answer first
9foundation · easy
During a periodic review of artifacts, a privacy team discovers that a data retention policy has been updated, but the artifact documenting the policy has not been updated. What is the most appropriate action?
Select an answer first
10foundation · easy
When analyzing evidence to assess compliance with a privacy requirement, what is the first step an analyst should take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.