Discuss Isaca CDPSE Exam Topic 3 Question 69

When configuring information systems for the communication and transport of personal data, an organization should:

Aadopt the default vendor specifications.

Breview configuration settings for compliance.

Cimplement the least restrictive mode.

Denable essential capabilities only.

Suggested Answer: B

When configuring information systems for the communication and transport of personal data, an organization should review configuration settings for compliance with privacy regulations and standards. This means that the organization should ensure that the configuration settings are aligned with the privacy principles and requirements that apply to the data being communicated or transported, such as data minimization, purpose limitation, consent, encryption, pseudonymization, anonymization, etc. The organization should also document and monitor the configuration settings and perform regular audits and reviews to verify their effectiveness and compliance.Reference:: CDPSE Review Manual (Digital Version), page 151

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Raina 9 months ago

Wait, are people really using default settings? That’s surprising!

Blythe 9 months ago

C sounds risky, least restrictive could expose data.

Franklyn 9 months ago

A is a bad idea, always customize!

Justine 10 months ago

Definitely B, compliance is key!

Coletta 10 months ago

I agree with D, only enable what you need.

Sharika 11 months ago

Implementing the least restrictive mode sounds familiar, but I wonder if that could lead to vulnerabilities in the system.

Selma 11 months ago

I feel like adopting default vendor specifications might not be secure enough, but I can't remember the specific risks we discussed in class.

Evelynn 11 months ago

I remember a practice question that emphasized the importance of enabling essential capabilities only, but I can't recall if that was the best approach overall.

Geoffrey 11 months ago

I think reviewing configuration settings for compliance is really important, but I'm not sure if that's the only thing we should focus on.

Jaime 11 months ago

I'm feeling confident about this. The best option is D - we should only enable the essential capabilities needed to securely transport personal data.

Stefan 12 months ago

I'm not totally sure about this one. I'll need to think through the potential risks and benefits of each approach.

Breana 12 months ago

Okay, I've got this. The answer is clearly B - we need to review the configuration settings to ensure compliance with regulations.

Kris 12 months ago

Hmm, I'm a bit unsure about this. I'll need to make sure I understand the key principles around data privacy and security.

Tyra 1 year ago

This looks like a tricky one. I'll need to carefully review the options and think about the best approach to protecting personal data.

Jamal 1 year ago

I heard the vendor's default settings are 'Admin:password' and 'Guests:welcome'. Sounds secure to me!

Gilma 1 year ago

I agree with Vashti, it's important to ensure we are following regulations.

Leota 1 year ago

B and D, all the way. Can't be too careful with personal data these days. Don't want the IT guy to come knocking, you know?

Evangelina 9 months ago

↳ replying to Leota

Better safe than sorry with personal data!

Chantell 10 months ago

↳ replying to Leota

Can't risk it. B and D are smart choices.

Rossana 10 months ago

↳ replying to Leota

Totally agree! Compliance is key.

Moon 10 months ago

↳ replying to Leota

Yes! Only essential capabilities for sure.

Kristeen 1 year ago

D is the way to go. Why waste time with unnecessary bells and whistles? Keep it simple and secure.

Lenora 1 year ago

↳ replying to Kristeen

I agree, keeping it simple is key when it comes to security.

Vashti 1 year ago

I think we should review configuration settings for compliance.

Sherrell 1 year ago

Option B all the way! Gotta make sure we're following those compliance guidelines to the letter.

Fallon 1 year ago

↳ replying to Sherrell

Absolutely, compliance is key when it comes to handling personal data.

Reita 1 year ago

↳ replying to Sherrell

B) review configuration settings for compliance.

Ahmed 1 year ago

↳ replying to Sherrell

It's important to stay on top of those guidelines to protect the data.

Cherelle 1 year ago

↳ replying to Sherrell

I agree, we need to review those configuration settings carefully.

Paola 1 year ago

↳ replying to Sherrell

Definitely, compliance is key when it comes to handling personal data.

Isaca CDPSE Exam - Topic 3 Question 69 Discussion