A multinational company with offices in the EU and the US wants to transfer employee HR data from its EU branch to its US headquarters for centralized processing. Under the GDPR, which mechanism is most directly relevant to this transfer?

Standard Contractual Clauses (SCCs) approved by the European Commission.

Encrypting the data before transfer without any legal basis.

An adequacy decision from the US government.

A simple internal memorandum authorizing the transfer.

An online forum wants to allow users to post comments without revealing their real identities, but the forum needs to ban users who violate rules. Which technique allows the forum to maintain accountability while protecting user privacy?

Encryption: encrypt all user data and store the key with the user.

Data minimization: collect only the user's email address.

Pseudonymization: assign each user a unique, persistent pseudonym.

Anonymization: remove all user identifiers from the system.

Which practice is a recommended best practice for protecting personal information when using public Wi-Fi?

Using a virtual private network (VPN)

Disabling the firewall on your device

Sharing your location with the network

Using the same password for all accounts

A mobile app developer wants to add a feature that tracks users' location to provide personalized restaurant recommendations. The app already collects the user's name and email for account creation. Under data minimization principles, what should the developer do before implementing the location tracking?

Collect location data only while the app is in active use and allow users to opt out.

Share location data with third-party advertisers to offset development costs.

Store location data indefinitely to build a long-term user profile.

Collect location data continuously in the background to improve recommendation accuracy.

A user wants to protect their privacy when browsing the web on a shared computer. Which combination of practices is most effective?

Use private browsing mode and clear cookies after each session.

Install a toolbar that displays the weather forecast.

Disable the browser's password manager and write passwords on a sticky note.

Use the same browser profile for all users to simplify access.

LPI Security Essentials

Domain 5Objective 3

025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 5)

Part of the 025 Identity and Privacy domain, which makes up ~22% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 21–25

21application · medium
A multinational company with offices in the EU and the US wants to transfer employee HR data from its EU branch to its US headquarters for centralized processing. Under the GDPR, which mechanism is most directly relevant to this transfer?
Select an answer first
22application · medium
An online forum wants to allow users to post comments without revealing their real identities, but the forum needs to ban users who violate rules. Which technique allows the forum to maintain accountability while protecting user privacy?
Select an answer first
23foundation · easy
Which practice is a recommended best practice for protecting personal information when using public Wi-Fi?
Select an answer first
24application · medium
A mobile app developer wants to add a feature that tracks users' location to provide personalized restaurant recommendations. The app already collects the user's name and email for account creation. Under data minimization principles, what should the developer do before implementing the location tracking?
Select an answer first
25application · medium
A user wants to protect their privacy when browsing the web on a shared computer. Which combination of practices is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.