Privacy-Enhancing Technologies CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A software company is building a customer relationship management (CRM) system that must comply with GDPR. The system will process customer data for two purposes: contract fulfillment and marketing. The company needs to ensure that a customer who consents to marketing but not to contract fulfillment (which is necessary for the contract) is handled correctly. What is the best approach?

   • AAsk the customer to consent to both purposes or deny service.
   • BIgnore the consent for marketing and process all data for both purposes.
   • CUse a single consent tag for all processing, since the customer has consented to one purpose.
   • DUse separate consent tags for each processing purpose and enforce them independently.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A data protection officer is evaluating privacy-enhancing technologies for a project that involves processing personal data for statistical analysis. The analysis requires accurate aggregate results, but the risk of re-identification is high. The DPO wants to minimize the risk while preserving the utility of the data for statistical purposes. Which PET is most suitable?

   • AUse federated learning to train a model on the data.
   • BUse pseudonymization to replace identifiers with pseudonyms.
   • CUse differential privacy to add controlled noise to the aggregate results.
   • DUse homomorphic encryption to encrypt the data during processing.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the main difference between pseudonymization and anonymization?

   • APseudonymization only applies to data at rest, while anonymization applies to data in transit
   • BPseudonymization is a type of encryption, while anonymization is a type of hashing
   • CPseudonymization is irreversible, while anonymization is reversible
   • DPseudonymization allows re-identification under controlled conditions, while anonymization does not
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an example of an anonymization technique?

   • AEncryption with a secret key
   • BGeneralization, such as replacing exact ages with age ranges
   • CHashing with a salt that is stored securely
   • DTokenization, where a token is used in place of a credit card number
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a consent tagging system, what does a 'tag' typically represent?

   • AThe geographic location where the data is stored
   • BThe date when the data was last accessed
   • CThe user's consent status for a particular processing purpose
   • DThe encryption key used to protect the data
   Reveal Solution Discussion Select an answer first