Isaca CDPSE Exam - Topic 3 Question 69 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 69
Topic #: 3

[All CDPSE Questions]

When configuring information systems for the communication and transport of personal data, an organization should:

Aadopt the default vendor specifications.

Breview configuration settings for compliance.

Cimplement the least restrictive mode.

Denable essential capabilities only.

Show Suggested Answer

Suggested Answer: B

When configuring information systems for the communication and transport of personal data, an organization should review configuration settings for compliance with privacy regulations and standards. This means that the organization should ensure that the configuration settings are aligned with the privacy principles and requirements that apply to the data being communicated or transported, such as data minimization, purpose limitation, consent, encryption, pseudonymization, anonymization, etc. The organization should also document and monitor the configuration settings and perform regular audits and reviews to verify their effectiveness and compliance.Reference:: CDPSE Review Manual (Digital Version), page 151

by Gladys at Aug 03, 2025, 05:01 PM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raina

2 months ago

Wait, are people really using default settings? That’s surprising!

upvoted 0 times

...

Blythe

2 months ago

C sounds risky, least restrictive could expose data.

upvoted 0 times

...

Franklyn

2 months ago

A is a bad idea, always customize!

upvoted 0 times

...

Justine

2 months ago

Definitely B, compliance is key!

upvoted 0 times

...

Coletta

3 months ago

I agree with D, only enable what you need.

upvoted 0 times

...

Sharika

3 months ago

Implementing the least restrictive mode sounds familiar, but I wonder if that could lead to vulnerabilities in the system.

upvoted 0 times

...

Selma

3 months ago

I feel like adopting default vendor specifications might not be secure enough, but I can't remember the specific risks we discussed in class.

upvoted 0 times

...

Evelynn

4 months ago

I remember a practice question that emphasized the importance of enabling essential capabilities only, but I can't recall if that was the best approach overall.

upvoted 0 times

...

Geoffrey

4 months ago

I think reviewing configuration settings for compliance is really important, but I'm not sure if that's the only thing we should focus on.

upvoted 0 times

...

Jaime

4 months ago

I'm feeling confident about this. The best option is D - we should only enable the essential capabilities needed to securely transport personal data.

upvoted 0 times

...

Stefan

4 months ago

I'm not totally sure about this one. I'll need to think through the potential risks and benefits of each approach.

upvoted 0 times

...

Breana

4 months ago

Okay, I've got this. The answer is clearly B - we need to review the configuration settings to ensure compliance with regulations.

upvoted 0 times

...

Kris

4 months ago

Hmm, I'm a bit unsure about this. I'll need to make sure I understand the key principles around data privacy and security.

upvoted 0 times

...

Tyra

5 months ago

This looks like a tricky one. I'll need to carefully review the options and think about the best approach to protecting personal data.

upvoted 0 times

...

Jamal

5 months ago

I heard the vendor's default settings are 'Admin:password' and 'Guests:welcome'. Sounds secure to me!

upvoted 0 times

...

Gilma

5 months ago

I agree with Vashti, it's important to ensure we are following regulations.

upvoted 0 times

...

Leota

5 months ago

B and D, all the way. Can't be too careful with personal data these days. Don't want the IT guy to come knocking, you know?

upvoted 0 times

Evangelina

1 month ago

Better safe than sorry with personal data!

upvoted 0 times

...

Chantell

2 months ago

Can't risk it. B and D are smart choices.

upvoted 0 times

...

Rossana

2 months ago

Totally agree! Compliance is key.

upvoted 0 times

...

Moon

3 months ago

Yes! Only essential capabilities for sure.

upvoted 0 times

...

Kristeen

6 months ago

D is the way to go. Why waste time with unnecessary bells and whistles? Keep it simple and secure.

upvoted 0 times

Lenora

5 months ago

I agree, keeping it simple is key when it comes to security.

upvoted 0 times

...

Vashti

7 months ago

I think we should review configuration settings for compliance.

upvoted 0 times

...

Sherrell

7 months ago

Option B all the way! Gotta make sure we're following those compliance guidelines to the letter.

upvoted 0 times

Fallon

5 months ago

Absolutely, compliance is key when it comes to handling personal data.

upvoted 0 times

...

Reita

5 months ago

B) review configuration settings for compliance.

upvoted 0 times

...

Ahmed

5 months ago

It's important to stay on top of those guidelines to protect the data.

upvoted 0 times

...

Cherelle

6 months ago

I agree, we need to review those configuration settings carefully.

upvoted 0 times

...

Paola

7 months ago

Definitely, compliance is key when it comes to handling personal data.

upvoted 0 times

...