Program Monitoring and Metrics CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When analyzing privacy metric data, what does a consistent upward trend in the number of unresolved data subject requests indicate?

   • AA potential gap in the request-handling process
   • BThe monitoring process is unnecessary
   • CThe privacy program is operating effectively
   • DThe organization is receiving fewer requests
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary goal of using privacy metrics for continuous improvement?

   • ATo replace the need for privacy impact assessments
   • BTo ensure all metrics are reported to the board quarterly
   • CTo enhance the effectiveness and efficiency of the privacy program over time
   • DTo justify the privacy program's budget to finance
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the most important characteristic of a report on privacy program performance for senior management?

   • AIt focuses on actionable insights and trends
   • BIt includes every raw data point collected
   • CIt is written only in technical jargon
   • DIt is distributed only to the privacy team
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A privacy team's metrics show that the rate of privacy incidents caused by misconfigured cloud storage has been stable for several quarters. However, a recent internal audit revealed that the number of cloud storage buckets has doubled, and the team suspects that the stable incident rate may be masking an increased risk. What is the most appropriate action for the privacy team to take?

   • AContinue with the current monitoring approach, as the incident rate is stable and there is no evidence of a problem.
   • BInvestigate the relationship between the increased number of cloud storage buckets and the incident rate to determine if the risk profile has changed.
   • CImmediately implement a new automated tool to scan all cloud storage buckets for misconfigurations.
   • DReport the stable incident rate to management as evidence that the current controls are effective.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A privacy team has been tracking the number of privacy incidents for a year. The data shows a downward trend. However, the team also knows that a new automated detection tool was implemented halfway through the year. How should the team interpret the downward trend in incidents?

   • AThe downward trend may be misleading because the new tool could have changed the way incidents are detected and reported.
   • BThe downward trend is likely due to the new tool, so the team should stop tracking the incident metric.
   • CThe team should report the downward trend to management as a success, without mentioning the new tool.
   • DThe downward trend is a clear indication that the privacy program is improving and no further action is needed.
   Reveal Solution Discussion Select an answer first