025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which action is a privacy best practice when creating online accounts?

   • AAllowing the site to share your data with partners by default
   • BProviding only the minimum required personal information
   • CUsing your full legal name as your username
   • DUsing the same strong password for every account
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which privacy-enhancing technology transforms personal data into a form that cannot be reversed to identify an individual?

   • AEncryption
   • BPseudonymization
   • CTokenization
   • DAnonymization
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A city government is deploying smart meters that collect household energy usage every 15 minutes. Privacy advocates are concerned that the data can reveal when residents are home, asleep, or away. The city wants to use the data for grid management while addressing privacy concerns. Which approach best balances the city's operational need with residents' privacy?

   • AAggregate the data at the neighborhood level and delete individual-level data after processing.
   • BPublish the raw individual-level data openly for transparency.
   • CCollect data every 15 minutes and retain it indefinitely for future analysis.
   • DShare individual-level data with third-party marketers for targeted advertising.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Why is privacy important for personal data protection?

   • AIt guarantees that personal data is always stored on encrypted servers
   • BIt ensures that organizations can freely share personal data for marketing purposes
   • CIt prevents all forms of cybercrime, including malware and phishing
   • DIt safeguards individuals' autonomy, dignity, and freedom from harm or discrimination
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A small e-commerce startup collects customer email addresses during checkout to send order confirmations. The marketing team now wants to use these same addresses to send a weekly promotional newsletter. Under GDPR-aligned data protection principles, what must the company do before sending the newsletter?

   • AObtain separate, explicit consent from each customer for the marketing purpose.
   • BSend the newsletter but include an unsubscribe link in every email.
   • CAnonymize the email addresses before using them for the newsletter.
   • DNotify customers via the order confirmation email that they will receive the newsletter.
   Reveal Solution Discussion Select an answer first