A health clinic stores patient records in a database and needs to share a dataset with a research partner for statistical analysis of disease trends. The researchers do not need to contact any patient. Which privacy-enhancing technique best balances the research need with patient privacy?

Anonymize the records by removing all direct and indirect identifiers.

Pseudonymize the records by replacing names with unique codes.

Send the raw records over a secure file transfer protocol.

Encrypt the entire database and share the decryption key with the researchers.

A company that sells software to consumers in California wants to ensure compliance with the CCPA. The company currently collects users' browsing history and purchase records. Which obligation is a direct requirement of the CCPA?

Store all consumer data on servers located in California.

Conduct a Data Protection Impact Assessment (DPIA) for all data processing.

Appoint a Data Protection Officer (DPO) regardless of company size.

Provide users with the right to opt out of the sale of their personal information.

A US-based company that is not established in the EU offers a free mobile game that collects users' device identifiers and gameplay stats. The company has users in Germany and France. Under the GDPR, which action is most directly required of the company?

Obtain a data protection certification from a US authority.

Delete the game from EU app stores.

Appoint a representative in the EU.

Store all collected data on servers located in the EU.

LPI Security Essentials

Domain 5Objective 3

025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Part of the 025 Identity and Privacy domain, which makes up ~22% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 1–5

1application · medium
A health clinic stores patient records in a database and needs to share a dataset with a research partner for statistical analysis of disease trends. The researchers do not need to contact any patient. Which privacy-enhancing technique best balances the research need with patient privacy?
Select an answer first
2foundation · easy
Which principle requires that only the minimum amount of personal data necessary for a specific purpose be collected?
Select an answer first
3foundation · easy
Which regulation is specifically designed to protect the personal data of individuals in the European Union?
Select an answer first
4application · medium
A company that sells software to consumers in California wants to ensure compliance with the CCPA. The company currently collects users' browsing history and purchase records. Which obligation is a direct requirement of the CCPA?
Select an answer first
5application · medium
A US-based company that is not established in the EU offers a free mobile game that collects users' device identifiers and gameplay stats. The company has users in Germany and France. Under the GDPR, which action is most directly required of the company?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 1)

Questions 1–5

A health clinic stores patient records in a database and needs to share a dataset with a research partner for statistical analysis of disease trends. The researchers do not need to contact any patient. Which privacy-enhancing technique best balances the research need with patient privacy?

Which principle requires that only the minimum amount of personal data necessary for a specific purpose be collected?

Which regulation is specifically designed to protect the personal data of individuals in the European Union?

A company that sells software to consumers in California wants to ensure compliance with the CCPA. The company currently collects users' browsing history and purchase records. Which obligation is a direct requirement of the CCPA?

A US-based company that is not established in the EU offers a free mobile game that collects users' device identifiers and gameplay stats. The company has users in Germany and France. Under the GDPR, which action is most directly required of the company?

Keep studying — 025 Identity and Privacy