MENU
Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?
Suggested Answer: D
Get Premium CDPSE Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
JU
Julie
11 months ago
I’m not sure about A, can we really identify all controls upfront?
AL
Alease
12 months ago
B is also important, but not primary in my opinion.
AN
Annamae
12 months ago
Surprised that D isn't the top choice, isn't that crucial?
AR
Aron
12 months ago
I think C is more important, assessing risk is key.
AL
Alaine
1 year ago
Definitely A, it's all about mitigating risks!
TY
Tyisha
1 year ago
I feel like determining the service provider's ability to maintain data protection controls is important, but is it the primary objective?
SE
Selma
1 year ago
I remember a practice question that focused on assessing risks associated with personal data usage. That seems relevant here too.
ST
Stefania
1 year ago
I think the primary objective is to identify controls to mitigate data privacy risks, but I'm not entirely sure.
CR
Craig
1 year ago
Classifying personal data according to the data classification scheme sounds like a secondary task, not the main goal of a PIA.
ST
Stephane
1 year ago
I remember learning about these different org structures in class. Based on the information provided, I think this is most likely a projectized structure, so I'll select option C.
DE
Detra
1 year ago
Hmm, I'm a little confused by this question. The underlined text doesn't seem to make sense to me, but I'm not sure which of the options is the correct term. I might need to review my notes on software development concepts to be sure I'm selecting the right answer.
EV
Eveline
1 year ago
I think the key here is that the exception shielding logic in Service A is not sufficient on its own. The question is implying that there's a gap in the security measures, and option C seems to be the best answer - we need to use the exception shielding logic together with encryption to truly prevent the spread of malicious content.
EL
Elizabeth
1 year ago
I'm a bit confused on the differences between the portal options. The question doesn't provide a lot of detail on the capabilities of each one. I'd want to do some more research on the features and limitations of each before making a decision. Maybe I'll mark this one and come back to it later if I have time.
CA
Cassie
1 year ago
I'm not sure about this one. The question seems a bit confusing, and I'm not familiar with the term "fishbone diagram."
ST
Stefany
1 year ago
I'm a bit confused by this question. Dropping the age feature entirely seems like it could lead to important information being lost. But the 0 values are definitely concerning. Maybe using a more advanced technique like k-means clustering could help handle the missing data in a more sophisticated way?