Free Isaca CDPSE Exam Questions

Become Isaca Certified with updated CDPSE exam questions and correct answers

Page: 1 / 48

Total 240 Questions | Updated On: Oct 28, 2025

Add To Cart

Question 1

A privacy manager is attending a planning meeting in which marketing personnel argue for the collection of PII from customers that

may be used sometime in the future. How should the privacy manager respond?

A : rmit the collection of the additional PII fields.

B : quire that the additional PII fields be encrypted.

C : date the data retention schedule to include the additional PII fields.

D : rbid the collection of the additional PII fields.

Answer: D

Question 2

An organization want to develop an application programming interface (API) to seamlessly exchange personal data with an application hosted by a third-party service provider. What should be the FIRST step when developing an application link?

A : ta tagging

B : ta normalization

C : ta mapping

D : ta hashing

Answer: C

Question 3

An online retail company is trying to determine how to handle users' data if they unsubscribe from marketing emails generated from the website. Which of the following is the BEST approach for handling personal data that has been restricted?

A : crypt users' information so it is inaccessible to the marketing department.

B : ference the privacy policy to see if the data is truly restricted.

C : move users' information and account from the system.

D : ag users' email addresses to make sure they do not receive promotional information.

Answer: D

Question 4

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

A : eliminates cryptographic key collision.

B : minimizes the risk if the cryptographic key is compromised.

C : is more practical and efficient to use a single cryptographic key.

D : ch process can only be supported by its own unique key management process.

Answer: C

Question 5

A US state has enacted a sweeping new extraterritorial privacy regulation that focuses on cross-state border data transfer. What is the

first step that an online social media vendor should take?

A : Wait until there is sufficient case law to see whether the law is enforceable.

B : it until the law takes effect to begin making changes to systems.

C : tain expert privacy counsel to opine on applicability and interpretation.

D : rect developers to make changes to the system to comply with the new law.

Answer: C

Page: 1 / 48

Total 240 Questions | Updated On: Oct 28, 2025

Add To Cart