A company decides to mitigate the risk of data loss by implementing a backup and recovery solution. The privacy team is responsible for implementation. The company has a limited IT staff and a tight deadline. Which implementation approach is most likely to succeed?

Implement the solution all at once to meet the deadline

Outsource the implementation to a third-party vendor

Delay the implementation until more staff are available

Implement the solution using a phased approach, starting with the most critical data

A retail company decides to mitigate the risk of unauthorized access to customer data by implementing multi-factor authentication (MFA) for all employees. The privacy team is tasked with implementing this response. Which step should be taken FIRST to ensure a successful implementation?

Purchase and deploy MFA software to all endpoints

Conduct a cost-benefit analysis to confirm the response is still appropriate

Define metrics to measure the effectiveness of MFA

Identify stakeholders and communicate the implementation plan and timeline

A company implemented a risk response to mitigate the risk of data breaches by requiring encryption for all data at rest. During a review, the privacy team finds that some legacy systems cannot support encryption. The company has a low risk appetite and the legacy systems are critical to operations. Which response best balances the need to mitigate risk with operational continuity?

Mitigate the risk by implementing compensating controls, such as network segmentation and enhanced monitoring

Avoid the risk by decommissioning the legacy systems immediately

Accept the risk for the legacy systems because they are critical

Transfer the risk by purchasing cyber insurance for the legacy systems

A company implemented a risk response to mitigate the risk of data breaches by encrypting all customer data. During a periodic review, the privacy team discovers that encryption keys are stored on the same server as the data. What is the most appropriate action?

Transfer the risk by purchasing cyber insurance

Accept the risk because encryption is in place

Reassess the risk and consider the encryption control ineffective

Document the finding and continue monitoring

Certified Data Privacy Solutions Engineer

Domain 2Objective 5

Risk Response CDPSE Practice Questions (Page 2)

Part of the Privacy Risk Management and Compliance domain, which accounts for 18% of the CDPSE exam.

19questions here

4free pages

4concepts

18%of the exam

Questions 6–10

6expert · hard
A company decides to mitigate the risk of data loss by implementing a backup and recovery solution. The privacy team is responsible for implementation. The company has a limited IT staff and a tight deadline. Which implementation approach is most likely to succeed?
Select an answer first
7foundation · easy
An organization faces a privacy risk that could result in significant regulatory fines. The cost of implementing strong encryption and access controls is lower than the potential fines. Which risk response is most appropriate based on cost-benefit analysis?
Select an answer first
8application · medium
A retail company decides to mitigate the risk of unauthorized access to customer data by implementing multi-factor authentication (MFA) for all employees. The privacy team is tasked with implementing this response. Which step should be taken FIRST to ensure a successful implementation?
Select an answer first
9expert · hard
A company implemented a risk response to mitigate the risk of data breaches by requiring encryption for all data at rest. During a review, the privacy team finds that some legacy systems cannot support encryption. The company has a low risk appetite and the legacy systems are critical to operations. Which response best balances the need to mitigate risk with operational continuity?
Select an answer first
10application · medium
A company implemented a risk response to mitigate the risk of data breaches by encrypting all customer data. During a periodic review, the privacy team discovers that encryption keys are stored on the same server as the data. What is the most appropriate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.

Risk Response CDPSE Practice Questions (Page 2)

Questions 6–10

A company decides to mitigate the risk of data loss by implementing a backup and recovery solution. The privacy team is responsible for implementation. The company has a limited IT staff and a tight deadline. Which implementation approach is most likely to succeed?

An organization faces a privacy risk that could result in significant regulatory fines. The cost of implementing strong encryption and access controls is lower than the potential fines. Which risk response is most appropriate based on cost-benefit analysis?

A retail company decides to mitigate the risk of unauthorized access to customer data by implementing multi-factor authentication (MFA) for all employees. The privacy team is tasked with implementing this response. Which step should be taken FIRST to ensure a successful implementation?

A company implemented a risk response to mitigate the risk of data breaches by encrypting all customer data. During a periodic review, the privacy team discovers that encryption keys are stored on the same server as the data. What is the most appropriate action?

Keep studying — Privacy Risk Management and Compliance