Privacy-Enhancing Technologies CDPSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the key characteristic of anonymization as a privacy technique?

   • AIt encrypts personal data so only authorized users can read it
   • BIt replaces identifiers with random values that can be reversed with a lookup table
   • CIt irreversibly removes or alters personal identifiers so that individuals cannot be identified
   • DIt allows re-identification of individuals if a key is available
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When implementing consent tagging in a data processing system, what is a key step to ensure that consent preferences are enforced?

   • AStoring consent tags in a separate database that is not accessible to processing applications
   • BDeleting all data that is no longer actively used
   • CIntegrating consent checks into the data processing workflows
   • DEncrypting all data with a single master key
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When a user selects 'Reject all' on a cookie consent banner, what should the mechanism do?

   • ABlock all cookies, including those necessary for the site to function
   • BRedirect the user to a page explaining why cookies are needed
   • CSet only essential cookies and refrain from setting non-essential cookies
   • DSet all cookies but mark them as 'rejected' in the log
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An organization needs to share a dataset for research but must be able to re-identify individuals if necessary. Which PET is most appropriate?

   • AData masking
   • BPseudonymization
   • CEncryption
   • DAnonymization
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A data analytics firm is working with a client that wants to share customer data with a third-party vendor for a one-time marketing campaign. The client has a strict data minimization policy and wants to limit the risk of data misuse. The vendor needs to perform its own analysis and may need to contact customers who respond to the campaign. The client is concerned about the vendor retaining the data after the campaign. Which combination of PETs best addresses these requirements?

   • AUse homomorphic encryption to allow the vendor to compute on the data without seeing it.
   • BUse anonymization to remove all identifiers and provide the vendor with aggregate data only.
   • CUse differential privacy to add noise to the data before sharing.
   • DUse pseudonymization to replace customer IDs and a data processing agreement to enforce deletion.
   Reveal Solution Discussion Select an answer first