A company is considering deploying an intrusion detection system (IDS) to monitor its network. The security team wants to detect potential attacks but is concerned about the operational impact of blocking legitimate traffic. Which type of system best meets this need?

A honeypot that lures attackers into a decoy network

Intrusion detection system (IDS) that only alerts on suspicious activity

A firewall that blocks all traffic by default

Intrusion prevention system (IPS) that automatically blocks suspicious traffic

A company is deploying a new remote access solution for its employees. The security team wants to implement multi-factor authentication (MFA) to reduce the risk of credential theft. Which combination of factors provides the strongest MFA approach?

A password and a security question

A password and a one-time code sent via SMS

A smart card and a fingerprint scan

A software vendor wants to distribute a software update to customers and ensure that the update has not been tampered with and that it genuinely comes from the vendor. Which cryptographic mechanism should the vendor use?

Hash the update and publish the hash on the vendor's website

Sign the update with the vendor's private key

Encrypt the update with a symmetric key shared with all customers

Encrypt the update with the vendor's public key

A company is designing a system to securely exchange encrypted messages between two parties. They need to ensure that only the intended recipient can read the message, and that the sender can be verified. Which combination of cryptographic techniques should they use?

Asymmetric encryption for both the message and the key exchange

Symmetric encryption for both the message and the key exchange

Asymmetric encryption for the message and symmetric encryption for the key exchange

Symmetric encryption for the message and asymmetric encryption for the key exchange

Certified Data Privacy Solutions Engineer

Domain 4Objective 2

Security and Access Controls CDPSE Practice Questions (Page 7)

Part of the Privacy Engineering domain, which accounts for 39% of the CDPSE exam.

48questions here

10free pages

16concepts

39%of the exam

Questions 31–35

31application · medium
A company is considering deploying an intrusion detection system (IDS) to monitor its network. The security team wants to detect potential attacks but is concerned about the operational impact of blocking legitimate traffic. Which type of system best meets this need?
Select an answer first
32application · medium
A company is deploying a new remote access solution for its employees. The security team wants to implement multi-factor authentication (MFA) to reduce the risk of credential theft. Which combination of factors provides the strongest MFA approach?
Select an answer first
33application · medium
A software vendor wants to distribute a software update to customers and ensure that the update has not been tampered with and that it genuinely comes from the vendor. Which cryptographic mechanism should the vendor use?
Select an answer first
34application · medium
A company is designing a system to securely exchange encrypted messages between two parties. They need to ensure that only the intended recipient can read the message, and that the sender can be verified. Which combination of cryptographic techniques should they use?
Select an answer first
35foundation · easy
Which IAM component ensures that user actions can be traced back to an individual for auditing and accountability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.