Isaca CDPSE Exam - Topic 7 Question 9 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 9
Topic #: 7

Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?

ATo identify controls to mitigate data privacy risks

BTo classify personal data according to the data classification scheme

CTo assess the risk associated with personal data usage

DTo determine the service provider's ability to maintain data protection controls

Show Suggested Answer

Suggested Answer: D

by Kristeen at May 03, 2022, 11:14 PM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Julie

7 months ago

I’m not sure about A, can we really identify all controls upfront?

upvoted 0 times

...

Alease

7 months ago

B is also important, but not primary in my opinion.

upvoted 0 times

...

Annamae

7 months ago

Surprised that D isn't the top choice, isn't that crucial?

upvoted 0 times

...

Aron

7 months ago

I think C is more important, assessing risk is key.

upvoted 0 times

...

Alaine

8 months ago

Definitely A, it's all about mitigating risks!

upvoted 0 times

...

Tyisha

8 months ago

I feel like determining the service provider's ability to maintain data protection controls is important, but is it the primary objective?

upvoted 0 times

...

Selma

8 months ago

I remember a practice question that focused on assessing risks associated with personal data usage. That seems relevant here too.

upvoted 0 times

...

Stefania

8 months ago

I think the primary objective is to identify controls to mitigate data privacy risks, but I'm not entirely sure.

upvoted 0 times

...

Craig

8 months ago

Classifying personal data according to the data classification scheme sounds like a secondary task, not the main goal of a PIA.

upvoted 0 times

...

Stephane

8 months ago

I remember learning about these different org structures in class. Based on the information provided, I think this is most likely a projectized structure, so I'll select option C.

upvoted 0 times

...

Detra

8 months ago

Hmm, I'm a little confused by this question. The underlined text doesn't seem to make sense to me, but I'm not sure which of the options is the correct term. I might need to review my notes on software development concepts to be sure I'm selecting the right answer.

upvoted 0 times

...

Eveline

8 months ago

I think the key here is that the exception shielding logic in Service A is not sufficient on its own. The question is implying that there's a gap in the security measures, and option C seems to be the best answer - we need to use the exception shielding logic together with encryption to truly prevent the spread of malicious content.

upvoted 0 times

...

Elizabeth

8 months ago

I'm a bit confused on the differences between the portal options. The question doesn't provide a lot of detail on the capabilities of each one. I'd want to do some more research on the features and limitations of each before making a decision. Maybe I'll mark this one and come back to it later if I have time.

upvoted 0 times

...

Cassie

8 months ago

I'm not sure about this one. The question seems a bit confusing, and I'm not familiar with the term "fishbone diagram."

upvoted 0 times

...

Stefany

8 months ago

I'm a bit confused by this question. Dropping the age feature entirely seems like it could lead to important information being lost. But the 0 values are definitely concerning. Maybe using a more advanced technique like k-means clustering could help handle the missing data in a more sophisticated way?

upvoted 0 times

...