Incident Management CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which action is an example of eradicating a privacy incident?

   • ANotifying the affected individuals
   • BIsolating the affected network segment
   • CRemoving the malware that caused the data breach
   • DConducting a post-incident review
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   During a privacy incident investigation, the team finds that a database containing personal data was accessed by an unauthorized party. The database logs show the access, but the team is unsure if the data was actually exfiltrated. The incident response plan requires notification to regulators within 72 hours. What should the team do?

   • ANotify regulators only if exfiltration is confirmed, because notification is not required for mere access
   • BWait until the investigation confirms exfiltration before notifying regulators
   • CNotify regulators after the investigation is complete, even if it exceeds 72 hours
   • DNotify regulators within the 72-hour window, providing available details and indicating that the investigation is ongoing
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which component of a privacy incident response plan specifies the criteria for determining whether a privacy incident has occurred and the initial actions to take?

   • ARoles and responsibilities
   • BCommunication and notification procedures
   • CPost-incident review process
   • DIncident definition and severity levels
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company discovers that an attacker has been exfiltrating customer data from a web application over the past week. The attacker is using a valid user account. What is the MOST immediate containment action?

   • AChange the passwords of all users in the system
   • BDisable the compromised user account and revoke any active sessions
   • CNotify the affected customers that their data was exfiltrated
   • DTake the web application offline to prevent further data loss
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the first step in the reporting procedure when a privacy incident is suspected?

   • AWait for confirmation before reporting
   • BNotify the incident response team immediately
   • CDelete all related data to prevent further exposure
   • DContact the data protection authority
   Reveal Solution Discussion Select an answer first