HikeLetter | PMP Training & Certification Online Course | Project Management Learning

Overview

Course Description

Certification: ISACA Certified Data Privacy Solutions Engineer (CDPSE)
Provider: ISACA
Exam code: CDPSE (certification identifier; no separate numeric exam code listed)
Exam duration: Verify current duration with ISACA before booking; commonly listed as 3.5 hours
Official question count: Verify current count with ISACA before booking; commonly listed as 120 questions
Passing score: 450 on a scaled score of 200–800 (verify current candidate guide)
Exam fee (USD): Current fee varies by membership and region; verify in ISACA’s official registration portal

Course Questions

10 Questions

During a design review, consider this situation: A company wants privacy requirements built into a new app from the start. What is the best approach?

A. Apply privacy by design throughout the system development lifecycle. B. Proceed without review because the project team owns the business decision. C. Collect or retain additional data to avoid future limitations. D. Document the issue only after the system has gone live.

During a design review, consider this situation: A product team collects birth dates although age bands are sufficient. Which principle is most directly relevant?

A. Document the issue only after the system has gone live. B. Data minimization. C. Proceed without review because the project team owns the business decision. D. Collect or retain additional data to avoid future limitations.

During a design review, consider this situation: A team wants to reuse customer data for a purpose not explained at collection. What should happen first?

A. Collect or retain additional data to avoid future limitations. B. Document the issue only after the system has gone live. C. Assess compatibility, legal basis, transparency, and any required consent before reuse. D. Proceed without review because the project team owns the business decision.

During a design review, consider this situation: A new system processes sensitive data at scale. What should the privacy team recommend before launch?

A. Proceed without review because the project team owns the business decision. B. Collect or retain additional data to avoid future limitations. C. Document the issue only after the system has gone live. D. Conduct a privacy impact assessment (PIA/DPIA) and address identified risks.

During a design review, consider this situation: A vendor processes personal data on behalf of the organization. What is a key governance action?

A. Perform due diligence and establish a contract defining instructions, safeguards, and responsibilities. B. Proceed without review because the project team owns the business decision. C. Collect or retain additional data to avoid future limitations. D. Document the issue only after the system has gone live.

During a design review, consider this situation: A business cannot explain why it retains old customer records. What is the best corrective action?

A. Document the issue only after the system has gone live. B. Define purpose-based retention periods and securely delete or anonymize data when no longer needed. C. Proceed without review because the project team owns the business decision. D. Collect or retain additional data to avoid future limitations.

During a design review, consider this situation: A person requests a copy of their personal data. What should the organization do?

A. Collect or retain additional data to avoid future limitations. B. Document the issue only after the system has gone live. C. Verify the request appropriately, locate relevant data, and respond within applicable legal deadlines. D. Proceed without review because the project team owns the business decision.

During a design review, consider this situation: A privacy notice is technically complete but hard to understand. What improvement is best?

A. Collect or retain additional data to avoid future limitations. B. Document the issue only after the system has gone live. C. Use clear, concise, accessible language and explain purposes, sharing, rights, and contact routes. D. Proceed without review because the project team owns the business decision.

During a design review, consider this situation: A team plans to transfer personal data across borders. What must be checked?

A. Proceed without review because the project team owns the business decision. B. Collect or retain additional data to avoid future limitations. C. Document the issue only after the system has gone live. D. Applicable transfer rules, destination protections, transfer mechanisms, and supplementary safeguards.

During a design review, consider this situation: A business wants to use analytics data without identifying individuals. What is the strongest first step?

A. Apply appropriate de-identification and assess re-identification risk, access, and residual obligations. B. Proceed without review because the project team owns the business decision. C. Collect or retain additional data to avoid future limitations. D. Document the issue only after the system has gone live.

₹4999.00 ₹1999.00

Enroll Now

CDPSE