Isaca CDPSE Exam - Topic 4 Question 22 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 22
Topic #: 4

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructured data as a major risk. What should be done FIRST to address this situation?

AIdentify sensitive unstructured data at the point of creation.

BClassify sensitive unstructured data.

CIdentify who has access to sensitive unstructured data.

DAssign an owner to sensitive unstructured data.

Show Suggested Answer

Suggested Answer: A

by Alpha at Dec 08, 2022, 05:25 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luisa

4 months ago

Not sure if assigning an owner is the best first step.

upvoted 0 times

...

Gail

4 months ago

Definitely agree with classifying data first.

upvoted 0 times

...

Xuan

4 months ago

Surprised this wasn't a priority before!

upvoted 0 times

...

Marleen

4 months ago

I think identifying who has access is more important.

upvoted 0 times

...

Elvera

4 months ago

We need to classify sensitive unstructured data first.

upvoted 0 times

...

Elena

5 months ago

Assigning an owner seems important, but I wonder if we need to classify or identify the data first to make that step effective.

upvoted 0 times

...

Therese

5 months ago

I feel like knowing who has access to the data is crucial, but I can't recall if that should come before identifying the data itself.

upvoted 0 times

...

Jesusita

5 months ago

I think classifying the sensitive unstructured data might be the priority, but I could be mixing it up with another practice question we did.

upvoted 0 times

...

Natalie

5 months ago

I remember we discussed the importance of identifying data at the point of creation, but I'm not sure if that's the first step.

upvoted 0 times

...

Cheryll

5 months ago

The bottom line is always a key consideration, but I'm not sure it's the single most important factor. The organization's overall strategy and goals will also play a role.

upvoted 0 times

...

Latrice

5 months ago

I'm a bit confused on the difference between upsert and the "Refresh Name" action. I'll need to review those concepts before deciding between A and B.

upvoted 0 times

...

Pok

5 months ago

I'm a bit confused by this question. While performance tools seem like the obvious choice, I'm not sure if there are other factors I should be considering, like coverage or static analysis. Maybe I'm overthinking it, but I want to make sure I fully understand the requirements before selecting an answer.

upvoted 0 times

...

Shelba

5 months ago

I think we had a practice question that indicated DTMF negotiation issues could stem from codec choices. Could it be option C?

upvoted 0 times

...