Certified Data Privacy Solutions Engineer (CDPSE) — Question 224

Which of the following is the GREATEST privacy concern for an organization implementing endpoint detection response (EDR) tools on employee laptops?

Answer options

• A. Lack of an acknowledged user acceptance policy
• B. Unclear monitoring scope
• C. Poor controls on privileged access to EDR tools
• D. Lack of up-to-date EDR capability on employee laptops

Correct answer: C

Explanation

The correct answer, C, highlights that insufficient controls over privileged access to EDR tools can lead to misuse of sensitive data, posing a major privacy risk. While options A and B also present concerns, they do not directly impact the security of access to the EDR tools themselves. Option D is less critical since up-to-date capability does not necessarily compromise privacy as severely as access control issues.