Isaca CDPSE Exam - Topic 3 Question 27 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 27
Topic #: 3

[All CDPSE Questions]

Which of the following practices BEST indicates an organization follows the data minimization principle?

AData is pseudonymized when being backed up.

BData is encrypted before storage.

CData is only accessible on a need-to-know basis.

DData is regularly reviewed tor its relevance

Show Suggested Answer

Suggested Answer: C

by Jutta at Jul 08, 2023, 06:31 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ailene

3 months ago

Really? I thought pseudonymization was more about privacy than minimization.

upvoted 0 times

...

Jordan

3 months ago

Totally agree, D makes the most sense for relevance!

upvoted 0 times

...

Curt

4 months ago

Wait, isn't encryption just about security, not minimization?

upvoted 0 times

...

Mila

4 months ago

I think option C is the best choice here.

upvoted 0 times

...

Lai

4 months ago

Data minimization means only collecting what's necessary!

upvoted 0 times

...

Trevor

4 months ago

I’m a bit confused; I thought encryption was important for data protection, but not necessarily for minimizing the amount of data collected.

upvoted 0 times

...

Junita

4 months ago

I’m leaning towards option D too, but I wonder if pseudonymization during backups could also relate to minimizing data exposure.

upvoted 0 times

...

Shaunna

5 months ago

I remember a practice question that mentioned need-to-know access, but I feel like that’s more about security than minimizing data.

upvoted 0 times

...

Lou

5 months ago

I think data being regularly reviewed for its relevance might be the best indicator of data minimization, but I'm not entirely sure.

upvoted 0 times

...

Benton

5 months ago

I've got this! The key is to find the drug with the lowest total cost while also considering the dosing frequency. Drug C looks promising with the shorter treatment duration.

upvoted 0 times

...

Huey

5 months ago

I've got this! Subcontracting, Non-Stock, and Stock - those are the three types of procurement they're looking for. Easy peasy.

upvoted 0 times

...

Casandra

5 months ago

I feel like segregated records could be part of the answer, but it seems less comprehensive than what I remember about high-risk customer protocols.

upvoted 0 times

...

Tuyet

10 months ago

Haha, I bet the person who wrote this question loves a good pun. 'Best indicates' - get it? Anyway, D is the right pick.

upvoted 0 times

...

Barrett

10 months ago

C is a good practice, but it doesn't directly address the data minimization principle. D is the way to go.

upvoted 0 times

Dino

8 months ago

C) Data is only accessible on a need-to-know basis.

upvoted 0 times

...

Louis

9 months ago

B) Data is encrypted before storage.

upvoted 0 times

...

Aretha

9 months ago

A) Data is pseudonymized when being backed up.

upvoted 0 times

...

Gary

10 months ago

Encryption is great, but I agree that D is the correct choice. Gotta make sure we're not hoarding data just because we can.

upvoted 0 times

Erick

9 months ago

C) Data is only accessible on a need-to-know basis.

upvoted 0 times

...

Hermila

9 months ago

B) Data is encrypted before storage.

upvoted 0 times

...

Glendora

9 months ago

A) Data is pseudonymized when being backed up.

upvoted 0 times

...

Ollie

10 months ago

I think option D is the best answer here. Regular data reviews help ensure we're only storing what's necessary.

upvoted 0 times

Albert

8 months ago

Data encryption, like in option B, is also important to protect the data we do have.

upvoted 0 times

...

Vicki

8 months ago

True, both options D and C are key in following the data minimization principle.

upvoted 0 times

...

Eladia

8 months ago

I think option C is also crucial, limiting access to only those who need it helps with data minimization.

upvoted 0 times

...

Mohammad

8 months ago

I agree, option D is important to make sure we're not keeping unnecessary data.

upvoted 0 times

...

Helene

8 months ago

I think a combination of both practices would be the best approach to ensure data minimization.

upvoted 0 times

...

Son

9 months ago

True, both options D and C are key in following the data minimization principle.

upvoted 0 times

...

Chantell

9 months ago

But I think option C is also crucial, limiting access to only those who need it helps minimize data.

upvoted 0 times

...

Chantell

10 months ago

I agree, option D is important to make sure we are not keeping unnecessary data.

upvoted 0 times

...

Cyndy

10 months ago

But isn't limiting data access to only those who need it also a good way to minimize data?

upvoted 0 times

...

Virgina

11 months ago

I disagree, I believe encrypting the data before storage is the best way to follow the data minimization principle.

upvoted 0 times

...

Cyndy

11 months ago

I think the best practice is to pseudonymize the data when backing it up.

upvoted 0 times

...

Torie

11 months ago

I believe option D is also important, regularly reviewing data for its relevance helps in minimizing unnecessary data storage.

upvoted 0 times

...

Kris

11 months ago

I agree with Winfred, limiting access to data is crucial for data minimization.

upvoted 0 times

...

Winfred

11 months ago

I think the best practice is option C, data should only be accessible on a need-to-know basis.

upvoted 0 times

...