Understand Privacy Issues CCSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a Privacy Impact Assessment (PIA)?

   • ATo test the technical security controls of a system
   • BTo assess the financial profitability of a new product
   • CTo identify and mitigate privacy risks associated with a new or modified system, process, or program
   • DTo ensure that a system or process complies with the organization's branding guidelines
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which standard is specifically designed to provide guidance for cloud service providers acting as processors of personal data?

   • ACOBIT
   • BISO/IEC 27001
   • CISO/IEC 27018
   • DGAPP
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is planning to deploy a new customer relationship management (CRM) system that will process personal data of EU customers. The company's data protection officer (DPO) determines that the processing is likely to result in a high risk to individuals' rights and freedoms. What is the company required to do before starting the processing?

   • ASign a data processing agreement with the CRM vendor
   • BObtain explicit consent from all customers
   • CConduct a Data Protection Impact Assessment (DPIA)
   • DAppoint a data protection officer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A marketing company collects customer data for its own business purposes under a contract with a retail client. The contract specifies that the marketing company must protect the data as confidential and only use it for the agreed marketing campaigns. The data is not subject to any specific privacy regulation. If the marketing company sells the data to a third party, what is the primary consequence?

   • ANo consequence because the data is not regulated
   • BViolation of GDPR, leading to regulatory fines
   • CViolation of HIPAA, leading to criminal penalties
   • DBreach of contract, leading to potential civil liability
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement best describes the key difference between contractual private data and regulated private data?

   • ARegulated data requires encryption, while contractual data does not
   • BContractual data is only found in cloud environments, while regulated data is only on-premises
   • CContractual data is always more sensitive than regulated data
   • DRegulated data is protected by law, while contractual data is protected by agreements between parties
   Reveal Solution Discussion Select an answer first