Which of the following is the best example of an artifact in privacy risk management?

A completed privacy impact assessment (PIA) report

An email from an employee discussing a privacy issue

A privacy team needs to collect evidence of user consent records from a customer relationship management (CRM) system. Which evidence collection method is most appropriate for this task?

Manual gathering by copying records from the CRM

Automated extraction using a reporting tool

Interviews with CRM administrators

A privacy team conducts an annual review of its evidence and artifacts. During the review, they find that a data processing agreement (DPA) with a key vendor expired six months ago and was not renewed. What is the most appropriate action for the team to take?

Replace the DPA with a verbal agreement from the vendor

Renew the DPA and update the artifact to reflect the new effective date and terms

Keep the expired DPA as is and note in the review that it is expired

Remove the expired DPA from the repository because it is no longer valid

Which practice is most important for preserving the integrity of digital evidence collected during a privacy incident?

Compressing the evidence to save space

Storing the evidence on the same server where it was found

Making a forensic copy and working from the copy

Deleting irrelevant files to reduce clutter

When creating an artifact to document a privacy control decision, what should be included to make it auditable?

The names of all employees in the department

A list of all possible alternatives, even if not considered

The date, the decision maker, and the rationale for the decision

Only the final decision, without supporting details

Certified Data Privacy Solutions Engineer

Domain 2Objective 7

Evidence and Artifacts CDPSE Practice Questions (Page 5)

Part of the Privacy Risk Management and Compliance domain, which accounts for 18% of the CDPSE exam.

37questions here

8free pages

9concepts

18%of the exam

Questions 21–25

21foundation · easy
Which of the following is the best example of an artifact in privacy risk management?
Select an answer first
22foundation · easy
A privacy team needs to collect evidence of user consent records from a customer relationship management (CRM) system. Which evidence collection method is most appropriate for this task?
Select an answer first
23application · medium
A privacy team conducts an annual review of its evidence and artifacts. During the review, they find that a data processing agreement (DPA) with a key vendor expired six months ago and was not renewed. What is the most appropriate action for the team to take?
Select an answer first
24foundation · easy
Which practice is most important for preserving the integrity of digital evidence collected during a privacy incident?
Select an answer first
25foundation · easy
When creating an artifact to document a privacy control decision, what should be included to make it auditable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.