Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

1. A. To assess privacy risks
2. B. To evaluate effectiveness of data controls
3. C. To determine data integration gaps
4. D. To comply with regulations

Correct Answer: A

Which of the following is the BEST way to distinguish between a privacy risk and compliance risk?

1. A. Perform a privacy risk audit.
2. B. Conduct a privacy risk assessment.
3. C. Validate a privacy risk attestation.
4. D. Conduct a privacy risk remediation exercise.

Correct Answer: A

Which of the following BEST represents privacy threat modeling methodology?

1. A. Mitigating inherent risks and threats associated with privacy control weaknesses
2. B. Systematically eliciting and mitigating privacy threats in a software architecture
3. C. Reliably estimating a threat actor’s ability to exploit privacy vulnerabilities
4. D. Replicating privacy scenarios that reflect representative software usage

Correct Answer: A

Which of the following is MOST important to establish within a data storage policy to protect data privacy?

1. A. Data redaction
2. B. Data quality assurance (QA)
3. C. Irreversible disposal
4. D. Collection limitation

Correct Answer: D

Which of the following is the BEST way to hide sensitive personal data that is in use in a data lake?

1. A. Data masking
2. B. Data truncation
3. C. Data encryption
4. D. Data minimization

Correct Answer: A