السؤال #1

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. Customer communication

B. Employee access to electronic storage

C. Employee advisement regarding legal matters

D. Controlled access at the company headquarters

عرض الإجابة

اجابة صحيحة: D

السؤال #2

In privacy protection, what is a "covered entity"?

A. Personal data collected by a privacy organization

B. An organization subject to the privacy provisions of HIPAcorrect

C. A privacy office or team fully responsible for protecting personal information

D. Hidden gaps in privacy protection that may go unnoticed without expert analysis

عرض الإجابة

اجابة صحيحة: B

السؤال #3

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Failure to obtain opt-in consent to marketing

B. Failure to observe data localization requirements

C. Failure to implement the least privilege access standard

D. Failure to integrate privacy throughout the system development life cycle

عرض الإجابة

اجابة صحيحة: D

السؤال #4

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. Greater accessibility to the faxes at an off-site location

B. The ability to encrypt the transmitted faxes through a secure server

C. Reduction of the risk of data being seen or copied by unauthorized personnel

D. The ability to store faxes electronically, either on the user's PC or a password-protected network server

عرض الإجابة

اجابة صحيحة: A

السؤال #5

When implementing Privacy by Design (PbD), what would NOT be a key consideration?

A. Collection limitation

B. Data minimization

C. Limitations on liability

D. Purpose specification

عرض الإجابة

اجابة صحيحة: C

السؤال #6

In which situation would a Privacy Impact Assessment (PIA) be the least likely to be required?

A. If a company created a credit-scoring platform five years ago

B. If a health-care professional or lawyer processed personal data from a patient's file

C. If a social media company created a new product compiling personal data to generate user profiles

D. If an after-school club processed children's data to determine which children might have food allergies

عرض الإجابة

اجابة صحيحة: A

السؤال #7

What have experts identified as an important trend in privacy program development?

A. The narrowing of regulatory definitions of personal information

B. The rollback of ambitious programs due to budgetary restraints

C. The movement beyond crisis management to proactive prevention

D. The stabilization of programs as the pace of new legal mandates slows

عرض الإجابة

اجابة صحيحة: C

السؤال #8

SCENARIO Please use the following to answer the next QUESTION: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although IgNight's customer base consists primarily of offices in the US, some individuals have been so impressed by the unique aesthetic and energy-saving design of the light fixtures that they have requested IgNight's installations in their homes across the globe. One Sunday morning, while using his work laptop to purchase tickets for an

A. Tabletop exercises

B. Update its data inventory

C. IT security awareness training

D. Share communications relating to scheduled maintenance

عرض الإجابة

اجابة صحيحة: A

السؤال #9

SCENARIO Please use the following to answer the next QUESTION: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Insist upon one-on-one consultation with each person who works around the privacy officer

B. Develop a metric showing the number of initiatives launched without consultation and include it in reports, presentations, and consultation

C. Hold discussions with the department head of anyone who fails to consult with the privacy officer

D. Take your concerns straight to the Chief Executive Officer

عرض الإجابة

اجابة صحيحة: B

السؤال #10

SCENARIO Please use the following to answer the next QUESTION: John is the new privacy officer at the prestigious international law firm C A&M LLP. A&M LLP is very proud of its reputation in the practice areas of Trusts & Estates and Merger & Acquisition in both U.S. and Europe. During lunch with a colleague from the Information Technology department, John heard that the Head of IT, Derrick, is about to outsource the firm's email continuity service to their existing email security vendor C MessageSafe. Bein

A. Privacy compliance

B. Security commitment

C. Certifications to relevant frameworks

D. Data breach notification to A&M LL

عرض الإجابة

اجابة صحيحة: C

السؤال #11

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Sanjay should advise the distributor that Omnipresent Omnimedia has certified to the Privacy Shield Framework and there should be no issues

B. Sanjay should work with Manasa to review and remediate the Handy Helper as a gating item before it is released

C. Sanjay should document the data life cycle of the data collected by the Handy Helper

D. Sanjay should write a privacy policy to include with the Handy Helper user guide

عرض الإجابة

اجابة صحيحة: C

السؤال #12

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. The vendor will be required to report any privacy violations to the appropriate authorities

B. The vendor may not be aware of the privacy implications involved in the project

C. The vendor may not be forthcoming about the vulnerabilities of the database

D. The vendor will be in direct contact with all of the law firm's personal data

عرض الإجابة

اجابة صحيحة: D

السؤال #13

SCENARIO Please use the following to answer the next QUESTION: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Forensic inquiry

B. Data mapping

C. Privacy breach prevention

D. Vendor due diligence vetting

عرض الإجابة

اجابة صحيحة: D

السؤال #14

SCENARIO Please use the following to answer the next QUESTION: John is the new privacy officer at the prestigious international law firm C A&M LLP. A&M LLP is very proud of its reputation in the practice areas of Trusts & Estates and Merger & Acquisition in both U.S. and Europe. During lunch with a colleague from the Information Technology department, John heard that the Head of IT, Derrick, is about to outsource the firm's email continuity service to their existing email security vendor C MessageSafe. Bein

A. MessageSafe must apply due diligence before trusting Cloud Inc

B. MessageSafe must flow-down its data protection contract terms with A&M LLP to Cloud Inc

C. MessageSafe must apply appropriate security controls on the cloud infrastructure

D. MessageSafe must notify A&M LLP of a data breach

عرض الإجابة

اجابة صحيحة: B

السؤال #15

An organization's business continuity plan or disaster recovery plan does NOT typically include what?

A. Recovery time objectives

B. Emergency response guidelines

C. Statement of organizational responsibilities

D. Retention schedule for storage and destruction of information

عرض الإجابة

اجابة صحيحة: D

السؤال #16

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. His initiative to achieve regulatory compliance

B. His intention to transition to electronic storage

C. His objective for zero loss of personal information

D. His intention to send notice letters to customers and employees

عرض الإجابة

اجابة صحيحة: A

السؤال #17

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Restrict the vendor to using company security controls

B. Offer company resources to assist with the processing

C. Include transfer prohibitions in the vendor contractcorrect

D. Lock the data down in its current location

عرض الإجابة

اجابة صحيحة: C

السؤال #18

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. Who has access to the data

B. What the nature of the data is

C. How data at the company is collected

D. How long data at the company is keptcorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #19

Which is TRUE about the scope and authority of data protection oversight authorities?

A. The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators

B. All authority in the European Union rests with the Data Protection Commission (DPC)

C. No one agency officially oversees the enforcement of privacy regulations in the United States

D. The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority

عرض الإجابة

اجابة صحيحة: A

السؤال #20

Which of the following controls does the PCI DSS framework NOT require?

A. Implement strong asset control protocols

B. Implement strong access control measures

C. Maintain an information security policy

D. Maintain a vulnerability management program

عرض الإجابة

اجابة صحيحة: A

السؤال #21

Rationalizing requirements in order to comply with the various privacy requirements required by applicable law and regulation does NOT include which of the following?

A. Harmonizing shared obligations and privacy rights across varying legislation and/or regulators

B. Implementing a solution that significantly addresses shared obligations and privacy rights

C. Applying the strictest standard for obligations and privacy rights that doesn't violate privacy laws elsewhere

D. Addressing requirements that fall outside the common obligations and rights (outliers) on a case-by-case basis

عرض الإجابة

اجابة صحيحة: C

السؤال #22

Rationalizing requirements in order to comply with the various privacy requirements required by applicable law and regulation does NOT include which of the following?

A. Harmonizing shared obligations and privacy rights across varying legislation and/or regulators

B. Implementing a solution that significantly addresses shared obligations and privacy rights

C. Applying the strictest standard for obligations and privacy rights that doesn't violate privacy laws elsewhere

D. Addressing requirements that fall outside the common obligations and rights (outliers) on a case-by-case basis

عرض الإجابة

اجابة صحيحة: C

السؤال #23

An organization's privacy officer was just notified by the benefits manager that she accidentally sent out the retirement enrollment report of all employees to a wrong vendor. Which of the following actions should the privacy officer take first?

A. Perform a risk of harm analysis

B. Report the incident to law enforcement

C. Contact the recipient to delete the email

D. Send firm-wide email notification to employees

عرض الإجابة

اجابة صحيحة: A

السؤال #24

Which term describes a piece of personal data that alone may not identify an individual?

A. Unbundled datacorrect

B. A singularity

C. Non-aggregated infopoint

D. A single attribute

عرض الإجابة

اجابة صحيحة: A

السؤال #25

What does it mean to “rationalize” data protection requirements?

A. Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties

B. Look for overlaps in laws and regulations from which a common solution can be developed

C. Determine where laws and regulations are redundant in order to eliminate some from requiring compliancecorrect

D. Address the less stringent laws and regulations, and inform stakeholders why they are applicable

عرض الإجابة

اجابة صحيحة: C

السؤال #26

SCENARIO Please use the following to answer the next QUESTION: As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the targe

A. Procedures or processes exist, however they are not fully documented and do not cover all relevant aspects

B. Procedures and processes are fully documented and implemented, and cover all relevant aspects

C. Reviews are conducted to assess the effectiveness of the controls in place

D. Regular review and feedback are used to ensure continuous improvement toward optimization of the given process

عرض الإجابة

اجابة صحيحة: C

السؤال #27

SCENARIO Please use the following to answer the next QUESTION: As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the targe

A. Brainstorm methods for developing an enhanced privacy framework

B. Develop a strong marketing strategy to communicate the company’s privacy practices

C. Focus on improving the incident response plan in preparation for any breaks in protectioncorrect

D. Shift attention to privacy for emerging technologies as the company begins to use them

عرض الإجابة

اجابة صحيحة: C

السؤال #28

SCENARIO Please use the following to answer the next QUESTION: It's just what you were afraid of. Without consulting you, the information technology director at your organization launched a new initiative to encourage employees to use personal devices for conducting business. The initiative made purchasing a new, high-specification laptop computer an attractive option, with discounted laptops paid for as a payroll deduction spread over a year of paychecks. The organization is also paying the sales taxes. It

A. Interview the person reporting the incident following a standard protocol

B. Call the police to investigate even if you are unsure a crime occurred

C. Investigate the background of the person reporting the incident

D. Check company records of the latest backups to see what data may be recoverable

عرض الإجابة

اجابة صحيحة: A

السؤال #29

SCENARIO Please use the following to answer the next QUESTION: Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Consult an attorney experienced in privacy law and litigation

B. Use your background and knowledge to set a course of action

C. If you know the organization is guilty, advise it to accept the punishment

D. Negotiate the terms of a settlement before formal legal action takes place

عرض الإجابة

اجابة صحيحة: A

السؤال #30

What is the main purpose of a privacy program audit?

A. To mitigate the effects of a privacy breach

B. To justify a privacy department budget increase

C. To make decisions on privacy staff roles and responsibilities

D. To ensure the adequacy of data protection procedures

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان