Privacy-Enhancing Technologies CDPSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary role of Privacy-Enhancing Technologies (PETs) in data processing?

   • ATo provide a legal framework for data sharing
   • BTo ensure data is stored in a centralized location
   • CTo minimize the exposure of personal data and enhance privacy
   • DTo increase the speed of data processing
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational e-commerce company operates websites in the EU and the US. The EU site must comply with GDPR and ePrivacy, while the US site is subject to CCPA/CPRA. The company wants a single cookie consent platform to manage both. The privacy team notes that GDPR requires opt-in consent for non-essential cookies, while CCPA/CPRA requires an opt-out for the sale/sharing of personal information. What is the most appropriate design for the consent platform?

   • AUse a single global consent banner with opt-in consent for all users worldwide.
   • BUse opt-out consent for all users to simplify the platform.
   • CUse geo-targeting to present EU users with an opt-in banner and US users with an opt-out mechanism.
   • DUse opt-in consent for all users and provide a 'Do Not Sell My Personal Information' link for US users.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial institution is developing a machine learning model to detect fraudulent transactions. The model is trained on a dataset containing customer transaction histories, which include sensitive financial details. The privacy team is concerned about the risk of model inversion attacks, where an attacker could potentially reconstruct customer data from the model's outputs. Which privacy-preserving technique is most effective in mitigating this specific risk?

   • AUse homomorphic encryption to encrypt the training data and model parameters.
   • BUse federated learning to train the model across multiple institutions without sharing raw data.
   • CApply differential privacy by adding calibrated noise to the training process or model outputs.
   • DAnonymize the training data by removing all direct identifiers before training.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A European news website is updating its cookie consent mechanism to comply with ePrivacy and GDPR requirements. The site offers a free tier funded by advertising and a paid subscription tier with no advertising. The consent mechanism must allow users to choose between accepting all cookies, rejecting non-essential cookies, or managing specific categories. Which implementation best meets these requirements?

   • ADisplay a banner that sets all cookies by default and requires users to click a 'Learn More' link to find the opt-out options.
   • BRequire users to create an account and select their preferences in a settings page before accessing any content.
   • CDisplay a banner with 'Accept All', 'Reject Non-Essential', and 'Manage Preferences' buttons, and log the user's choice.
   • DOnly show the banner to users who are not logged in, assuming logged-in users have already consented.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a membership inference attack in machine learning?

   • AAn attack that adds malicious data to the training set
   • BAn attack that infers whether a specific individual's data was used in the model's training set
   • CAn attack that causes the model to misclassify inputs
   • DAn attack that extracts the model's hyperparameters
   Reveal Solution Discussion Select an answer first