السؤال #1

Which term describes a piece of personal data that alone may not identify an individual?

A. Unbundled datacorrect

B. A singularity

C. Non-aggregated infopoint

D. A single attribute

عرض الإجابة

اجابة صحيحة: A

السؤال #2

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Failure to obtain opt-in consent to marketing

B. Failure to observe data localization requirements

C. Failure to implement the least privilege access standard

D. Failure to integrate privacy throughout the system development life cycle

عرض الإجابة

اجابة صحيحة: B

السؤال #3

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Restrict the vendor to using company security controls

B. Offer company resources to assist with the processing

C. Include transfer prohibitions in the vendor contractcorrect

D. Lock the data down in its current location

عرض الإجابة

اجابة صحيحة: C

السؤال #4

SCENARIO Please use the following to answer the next QUESTION: As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others

A. Auditing

B. Monitoring

C. Assessment

D. Forensics

عرض الإجابة

اجابة صحيحة: A

السؤال #5

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. The timeline for monitoring

B. The method of recordkeeping

C. The use of internal employees

D. The type of required qualifications

عرض الإجابة

اجابة صحيحة: B

السؤال #6

Rationalizing requirements in order to comply with the various privacy requirements required by applicable law and regulation does NOT include which of the following?

A. Harmonizing shared obligations and privacy rights across varying legislation and/or regulators

B. Implementing a solution that significantly addresses shared obligations and privacy rights

C. Applying the strictest standard for obligations and privacy rights that doesn't violate privacy laws elsewhere

D. Addressing requirements that fall outside the common obligations and rights (outliers) on a case-by-case basis

عرض الإجابة

اجابة صحيحة: C

السؤال #7

SCENARIO Please use the following to answer the next QUESTION: Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to Question the company's privacy program at today's m

A. The amount of responsibility that a data controller retains

B. The appropriate role of an organization's security department

C. The degree to which training can lessen the number of security incidents

D. The role of Human Resources employees in an organization's privacy program

عرض الإجابة

اجابة صحيحة: C

السؤال #8

An organization’s internal audit team should do all of the following EXCEPT?

A. Implement processes to correct audit failures

B. Verify that technical measures are in place

C. Review how operations work in practice

D. Ensure policies are being adhered to

عرض الإجابة

اجابة صحيحة: B

السؤال #9

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. All faxes sent from the office must be documented and the phone number used must be double checked to ensure a safe arrival

B. All unused copies, prints, and faxes must be discarded in a designated recycling bin located near the work station and emptied daily

C. Before any copiers, printers, or fax machines are replaced or resold, the hard drives of these devices must be deleted before leaving the office

D. When sending a print job containing personal data, the user must not leave the information visible on the computer screen following the print command and must retrieve the printed document immediately

عرض الإجابة

اجابة صحيحة: B

السؤال #10

SCENARIO Please use the following to answer the next QUESTION: Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to Question the company's privacy program at today's m

A. By requiring training only on an as-needed basis

B. By offering alternative delivery methods for trainings

C. By introducing a system of periodic refresher trainings

D. By customizing training based on length of employee tenure

عرض الإجابة

اجابة صحيحة: B

السؤال #11

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. Appointing an internal ombudsman to address employee complaints regarding hours and pay

B. Using a third-party auditor to address privacy protection issues not recognized by the prior internal audits

C. Working with the Human Resources department to make screening procedures for potential employees more rigorous

D. Evaluating the company’s ability to handle personal health information if the plan to acquire the medical supply company goes forwardcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #12

All of the following changes will likely trigger a data inventory update EXCEPT?

A. Outsourcing the Customer Relationship Management (CRM) function

B. Acquisition of a new subsidiary

C. Onboarding of a new vendor

D. Passage of a new privacy regulation

عرض الإجابة

اجابة صحيحة: A

السؤال #13

SCENARIO Please use the following to answer the next QUESTION: It's just what you were afraid of. Without consulting you, the information technology director at your organization launched a new initiative to encourage employees to use personal devices for conducting business. The initiative made purchasing a new, high-specification laptop computer an attractive option, with discounted laptops paid for as a payroll deduction spread over a year of paychecks. The organization is also paying the sales taxes. It

A. The use of personal equipment is a cost-effective measure that leads to no greater security risks than are always present in a modern organization

B. Any computer or other equipment is company property whenever it is used for company business

C. While the company may not own the equipment, it is required to protect the business-related data on any equipment used by its employees

D. The use of personal equipment must be reduced as it leads to inevitable security risks

عرض الإجابة

اجابة صحيحة: C

السؤال #14

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. An open programming model that results in easy access

B. An unwillingness of cloud providers to provide security informationcorrect

C. A lack of vendors in the cloud computing market

D. A reduced resilience of data structures that may lead to data loss

عرض الإجابة

اجابة صحيحة: B

السؤال #15

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. Appointing an internal ombudsman to address employee complaints regarding hours and pay

B. Using a third-party auditor to address privacy protection issues not recognized by the prior internal audits

C. Working with the Human Resources department to make screening procedures for potential employees more rigorous

D. Evaluating the company’s ability to handle personal health information if the plan to acquire the medical supply company goes forwardcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #16

Which of the following controls does the PCI DSS framework NOT require?

A. Implement strong asset control protocols

B. Implement strong access control measures

C. Maintain an information security policy

D. Maintain a vulnerability management program

عرض الإجابة

اجابة صحيحة: A

السؤال #17

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. Prove the authenticity of the company's records

B. Arrange for official credentials for staff members

C. Adequately document reasons for inconsistencies

D. Create categories to reflect degrees of data importance

عرض الإجابة

اجابة صحيحة: C

السؤال #18

In privacy protection, what is a "covered entity"?

A. Personal data collected by a privacy organization

B. An organization subject to the privacy provisions of HIPAcorrect

C. A privacy office or team fully responsible for protecting personal information

D. Hidden gaps in privacy protection that may go unnoticed without expert analysis

عرض الإجابة

اجابة صحيحة: B

السؤال #19

What should be the first major goal of a company developing a new privacy program?

A. To survey potential funding sources for privacy team resources

B. To schedule conversations with executives of affected departments

C. To identify potential third-party processors of the organization's information

D. To create Data Lifecycle Management policies and procedures to limit data collection

عرض الإجابة

اجابة صحيحة: B

السؤال #20

Which is TRUE about the scope and authority of data protection oversight authorities?

A. The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators

B. All authority in the European Union rests with the Data Protection Commission (DPC)

C. No one agency officially oversees the enforcement of privacy regulations in the United States

D. The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority

عرض الإجابة

اجابة صحيحة: C

السؤال #21

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. Deceptive practices

B. Failing to institute the hotline

C. Failure to notify of processing

D. Negligence in consistent training

عرض الإجابة

اجابة صحيحة: A

السؤال #22

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. A second-party of supplier audit

B. A reference check with other clientscorrect

C. A table top demonstration of a potential threat

D. A public records search for earlier legal violations

عرض الإجابة

اجابة صحيحة: B

السؤال #23

What have experts identified as an important trend in privacy program development?

A. The narrowing of regulatory definitions of personal information

B. The rollback of ambitious programs due to budgetary restraints

C. The movement beyond crisis management to proactive prevention

D. The stabilization of programs as the pace of new legal mandates slows

عرض الإجابة

اجابة صحيحة: C

السؤال #24

What is the main reason to begin with 3-5 key metrics during the program development process?

A. To avoid undue financial costs

B. To keep the focus on the main organizational objectives

C. To minimize selective data use

D. To keep the process limited to as few people as possible

عرض الإجابة

اجابة صحيحة: C

السؤال #25

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Failure to obtain opt-in consent to marketing

B. Failure to observe data localization requirements

C. Failure to implement the least privilege access standard

D. Failure to integrate privacy throughout the system development life cycle

عرض الإجابة

اجابة صحيحة: D

السؤال #26

SCENARIO Please use the following to answer the next QUESTION: Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to Question the company's privacy program at today's m

A. The amount of responsibility that a data controller retains

B. The appropriate role of an organization's security department

C. The degree to which training can lessen the number of security incidents

D. The role of Human Resources employees in an organization's privacy program

عرض الإجابة

اجابة صحيحة: A

السؤال #27

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Restrict the vendor to using company security controls

B. Offer company resources to assist with the processing

C. Include transfer prohibitions in the vendor contractcorrect

D. Lock the data down in its current location

عرض الإجابة

اجابة صحيحة: C

السؤال #28

Incipia Corporation just trained the last of its 300 employees on their new privacy policies and procedures. If Incipia wanted to analyze the effectiveness of the training over the next 6 months, which form of trend analysis should they use?

A. Cyclical

B. Irregular

C. Statistical

D. Standard variance

عرض الإجابة

اجابة صحيحة: C

السؤال #29

Under the General Data Protection Regulation (GDPR), when would a data subject have the right to require the erasure of his or her data without undue delay?

A. When the data subject is a public authority

B. When the erasure is in the public interest

C. When the processing is carried out by automated means

D. When the data is no longer necessary for its original purpose

عرض الإجابة

اجابة صحيحة: A

السؤال #30

What is a key feature of the privacy metric template adapted from the National Institute of Standards and Technology (NIST)?

A. It provides suggestions about how to collect and measure data

B. It can be tailored to an organization's particular needs

C. It is updated annually to reflect changes in government policy

D. It is focused on organizations that do business internationally

عرض الإجابة

اجابة صحيحة: B

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان