Discuss Isaca CDPSE Exam Topic 7 Question 3

How can an organization BEST ensure its vendors are complying with data privacy requirements defined in their contracts?

AReview self-attestations of compliance provided by vendor management.

BObtain independent assessments of the vendors' data management processes.

CPerform penetration tests of the vendors' data security.

DCompare contract requirements against vendor deliverables.

Suggested Answer: D

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Alease 11 months ago

Totally agree, but how often should we do these checks?

Phung 12 months ago

Wait, are penetration tests really necessary for compliance?

Chu 12 months ago

I think comparing contracts is super effective.

Keva 12 months ago

Self-attestations aren't enough, too risky.

In 1 year ago

Independent assessments are a must!

Milly 1 year ago

I’m a bit confused about the best approach. I remember we talked about reviewing contracts, but I can’t recall if that was enough on its own. Maybe D is a good option?

Makeda 1 year ago

I practiced a question similar to this, and I think penetration tests are more about security than compliance. So, I’m not sure if C is the right answer.

Stephaine 1 year ago

I feel like self-attestations could be risky since vendors might not always be honest. I think comparing contract requirements to deliverables could be useful too, but I’m leaning towards B.

Danica 1 year ago

I remember we discussed the importance of independent assessments in class. I think option B might be the best choice, but I'm not entirely sure.

Deeanna 1 year ago

Ah, the Ansoff matrix - a classic strategy tool. I'm confident I can identify the right strategic options based on the descriptions provided.

Gretchen 1 year ago

Okay, I've got a strategy here. The question is asking what's NOT a unit covered by limits, so I need to think about the different components in a cloud environment and which ones wouldn't have limits set on them. I'm pretty confident the hypervisor is the right answer.

Santos 1 year ago

Hmm, I'm a bit unsure about this one. I know the C480 ML is for AI, but I'm not sure if it supports the SXM2 GPUs mentioned in the question. I'll need to double-check the specs.

Isaca CDPSE Exam - Topic 7 Question 3 Discussion