Isaca CDPSE Exam - Topic 3 Question 27 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 27
Topic #: 3

[All CDPSE Questions]

Which of the following practices BEST indicates an organization follows the data minimization principle?

AData is pseudonymized when being backed up.

BData is encrypted before storage.

CData is only accessible on a need-to-know basis.

DData is regularly reviewed tor its relevance

Show Suggested Answer

Suggested Answer: C

by Jutta at Jul 08, 2023, 06:31 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ailene

6 months ago

Really? I thought pseudonymization was more about privacy than minimization.

upvoted 0 times

...

Jordan

6 months ago

Totally agree, D makes the most sense for relevance!

upvoted 0 times

...

Curt

7 months ago

Wait, isn't encryption just about security, not minimization?

upvoted 0 times

...

Mila

7 months ago

I think option C is the best choice here.

upvoted 0 times

...

Lai

7 months ago

Data minimization means only collecting what's necessary!

upvoted 0 times

...

Trevor

7 months ago

I’m a bit confused; I thought encryption was important for data protection, but not necessarily for minimizing the amount of data collected.

upvoted 0 times

...

Junita

7 months ago

I’m leaning towards option D too, but I wonder if pseudonymization during backups could also relate to minimizing data exposure.

upvoted 0 times

...

Shaunna

8 months ago

I remember a practice question that mentioned need-to-know access, but I feel like that’s more about security than minimizing data.

upvoted 0 times

...

Lou

8 months ago

I think data being regularly reviewed for its relevance might be the best indicator of data minimization, but I'm not entirely sure.

upvoted 0 times

...

Benton

8 months ago

I've got this! The key is to find the drug with the lowest total cost while also considering the dosing frequency. Drug C looks promising with the shorter treatment duration.

upvoted 0 times

...

Huey

8 months ago

I've got this! Subcontracting, Non-Stock, and Stock - those are the three types of procurement they're looking for. Easy peasy.

upvoted 0 times

...

Casandra

8 months ago

I feel like segregated records could be part of the answer, but it seems less comprehensive than what I remember about high-risk customer protocols.

upvoted 0 times

...

Tuyet

1 year ago

Haha, I bet the person who wrote this question loves a good pun. 'Best indicates' - get it? Anyway, D is the right pick.

upvoted 0 times

...

Barrett

1 year ago

C is a good practice, but it doesn't directly address the data minimization principle. D is the way to go.

upvoted 0 times

Dino

11 months ago

C) Data is only accessible on a need-to-know basis.

upvoted 0 times

...

Louis

12 months ago

B) Data is encrypted before storage.

upvoted 0 times

...

Aretha

12 months ago

A) Data is pseudonymized when being backed up.

upvoted 0 times

...

Gary

1 year ago

Encryption is great, but I agree that D is the correct choice. Gotta make sure we're not hoarding data just because we can.

upvoted 0 times

Erick

12 months ago

C) Data is only accessible on a need-to-know basis.

upvoted 0 times

...

Hermila

12 months ago

B) Data is encrypted before storage.

upvoted 0 times

...

Glendora

12 months ago

A) Data is pseudonymized when being backed up.

upvoted 0 times

...

Ollie

1 year ago

I think option D is the best answer here. Regular data reviews help ensure we're only storing what's necessary.

upvoted 0 times

Albert

11 months ago

Data encryption, like in option B, is also important to protect the data we do have.

upvoted 0 times

...

Vicki

11 months ago

True, both options D and C are key in following the data minimization principle.

upvoted 0 times

...

Eladia

11 months ago

I think option C is also crucial, limiting access to only those who need it helps with data minimization.

upvoted 0 times

...

Mohammad

11 months ago

I agree, option D is important to make sure we're not keeping unnecessary data.

upvoted 0 times

...

Helene

11 months ago

I think a combination of both practices would be the best approach to ensure data minimization.

upvoted 0 times

...

Son

12 months ago

True, both options D and C are key in following the data minimization principle.

upvoted 0 times

...

Chantell

1 year ago

But I think option C is also crucial, limiting access to only those who need it helps minimize data.

upvoted 0 times

...

Chantell

1 year ago

I agree, option D is important to make sure we are not keeping unnecessary data.

upvoted 0 times

...

Cyndy

1 year ago

But isn't limiting data access to only those who need it also a good way to minimize data?

upvoted 0 times

...

Virgina

1 year ago

I disagree, I believe encrypting the data before storage is the best way to follow the data minimization principle.

upvoted 0 times

...

Cyndy

1 year ago

I think the best practice is to pseudonymize the data when backing it up.

upvoted 0 times

...

Torie

1 year ago

I believe option D is also important, regularly reviewing data for its relevance helps in minimizing unnecessary data storage.

upvoted 0 times

...

Kris

1 year ago

I agree with Winfred, limiting access to data is crucial for data minimization.

upvoted 0 times

...

Winfred

1 year ago

I think the best practice is option C, data should only be accessible on a need-to-know basis.

upvoted 0 times

...