Evidence and Artifacts CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is versioning important in artifact management?

   • AIt automatically disposes of artifacts after a set period
   • BIt ensures that the most current version is always used and that changes are traceable
   • CIt prevents unauthorized access to the artifact
   • DIt allows you to delete old versions to save storage space
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A privacy team is mapping evidence to privacy controls for an audit. They have a data breach response plan, a log of breach notifications, and a record of employee training completion. Which control would the breach notification log most directly support?

   • AThe control requiring timely notification of data breaches to regulators
   • BThe control requiring data minimization
   • CThe control requiring employee privacy training
   • DThe control requiring a data breach response plan
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A privacy analyst needs to understand how employees handle data subject access requests (DSARs) in practice, including any informal steps not documented in procedures. Which evidence collection method is most appropriate?

   • AAutomated log analysis of the DSAR system
   • BReviewing the DSAR procedure document
   • CManual review of DSAR emails
   • DInterviews with employees who handle DSARs
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   During an internal investigation into a suspected data breach, the privacy team collects server logs and email records. The investigation may lead to legal action. What is the most important action to take to preserve the admissibility of this evidence?

   • APrint all logs and emails and file them in a locked cabinet
   • BCopy the files to a shared network drive so the investigation team can access them easily
   • CDocument who collected each item, when, and where, and store the evidence in a secure, access-controlled location
   • DDelete the original files from the servers to prevent further access
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A privacy officer is creating an artifact to document the approval of a new data processing activity. The approval was given by the data protection officer (DPO) after a review of the risk assessment. What should the artifact include to be most useful for future audits?

   • AThe name of the person who requested the approval
   • BA link to the risk assessment document without any other details
   • CThe DPO's verbal approval and the date it was given
   • DA summary of the risk assessment, the DPO's written approval, and the date
   Reveal Solution Discussion Select an answer first