Free Isaca CDPSE Exam Questions

Become Isaca Certified with updated CDPSE exam questions and correct answers

Page: 1 / 48

Total 240 Questions | Updated On: Dec 07, 2025

Add To Cart

Question 1

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

A : eliminates cryptographic key collision.

B : minimizes the risk if the cryptographic key is compromised.

C : is more practical and efficient to use a single cryptographic key.

D : ch process can only be supported by its own unique key management process.

Answer: C

Question 2

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

A : crypt users' information so it is inaccessible to the marketing department.

B : ference the privacy policy to see if the data is truly restricted.

C : move users' information and account from the system.

D : ag users' email addresses to make sure they do not receive promotional information.

Answer: D

Question 3

A privacy manager is attending a planning meeting in which marketing personnel argue for the collection of PII from customers that

may be used sometime in the future. How should the privacy manager respond?

A : rmit the collection of the additional PII fields.

B : quire that the additional PII fields be encrypted.

C : date the data retention schedule to include the additional PII fields.

D : rbid the collection of the additional PII fields.

Answer: D

Question 4

A privacy strategist has examined a business process and has determined that personnel who perform the process do so consistently, but

there is no written process document. The maturity level of this process is:

A : itial

B : naged

C : peatable

D : fined

Answer: C

Question 5

An organization relying on physical access controls has migrated its on-premises applications to cloud service providers. What

compensating control should be enacted for access to cloud-based applications since physical access is less of a factor?

A : ltifactor authentication

B : ngle sign-on

C : Reduced sign-on

D : Biometrics

Answer: A

Page: 1 / 48

Total 240 Questions | Updated On: Dec 07, 2025

Add To Cart