Incident Management CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A data breach has occurred at a company, and the incident response team is preparing to notify affected customers. The breach involved names and email addresses, but not financial data. What is the MOST important factor to consider when drafting the customer notification?

   • AMinimize the details to avoid alarming customers
   • BFocus on the company's response efforts rather than the impact on customers
   • CDelay notification until the investigation is complete to provide a full report
   • DClearly describe the nature of the breach, the data involved, and the steps customers can take to protect themselves
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A global company experiences a data breach involving personal data of customers in multiple countries. The privacy team must notify stakeholders, including regulators, affected individuals, and internal executives. What is the BEST approach to manage these notifications?

   • AWait until the investigation is complete before notifying any external parties
   • BNotify all stakeholders simultaneously using a single generic message
   • CNotify internal executives first, then regulators, and finally affected individuals
   • DDevelop a notification plan that prioritizes based on legal requirements and the severity of harm to individuals
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An employee reports that they accidentally sent an email containing customer personal data to the wrong recipient. The email was sent to an external address. What is the FIRST action the privacy team should take?

   • AAttempt to recall the email and contact the recipient to request deletion
   • BConduct a full investigation to determine the root cause
   • CDisable the employee's email account
   • DNotify the data protection authority immediately
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   During a privacy incident investigation, the team discovers that a phishing email led to credential compromise, and the attacker accessed a database containing personal data. The team needs to preserve evidence while also containing the incident to prevent further access. Which approach best balances these priorities?

   • AImmediately shut down the affected servers to stop the attacker
   • BNotify law enforcement before taking any containment actions
   • CDelete the attacker's access and continue monitoring without isolating systems
   • DIsolate the affected systems from the network and take forensic images before any further actions
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company experiences a privacy incident that affects a small number of customers. The incident does not meet the threshold for regulatory notification, but the company decides to notify affected customers anyway. What is the PRIMARY reason for this decision?

   • ATo maintain transparency and trust with customers, even when not legally required
   • BTo comply with the incident response plan's requirement to notify all incidents
   • CTo avoid potential fines from regulators
   • DTo ensure that customers can take legal action against the company
   Reveal Solution Discussion Select an answer first