السؤال #1

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. Greater accessibility to the faxes at an off-site location

B. The ability to encrypt the transmitted faxes through a secure server

C. Reduction of the risk of data being seen or copied by unauthorized personnel

D. The ability to store faxes electronically, either on the user's PC or a password-protected network server

عرض الإجابة

اجابة صحيحة: A

السؤال #2

What is the best way to understand the location, use and importance of personal data within an organization?

A. By analyzing the data inventory

B. By testing the security of data systems

C. By evaluating methods for collecting data

D. By interviewing employees tasked with data entry

عرض الإجابة

اجابة صحيحة: C

السؤال #3

SCENARIO Please use the following to answer the next QUESTION: Penny has recently joined Ace Space, a company that sells homeware accessories online, as its new privacy officer. The company is based in California but thanks to some great publicity from a social media influencer last year, the company has received an influx of sales from the EU and has set up a regional office in Ireland to support this expansion. To become familiar with Ace Space’s practices and assess what her privacy priorities will be, P

A. Audit rights

B. Liability for a data breach

C. Pricing for data security protectionscorrect

D. The data a vendor will have access to

عرض الإجابة

اجابة صحيحة: C

السؤال #4

What is a key feature of the privacy metric template adapted from the National Institute of Standards and Technology (NIST)?

A. It provides suggestions about how to collect and measure data

B. It can be tailored to an organization's particular needs

C. It is updated annually to reflect changes in government policy

D. It is focused on organizations that do business internationally

عرض الإجابة

اجابة صحيحة: A

السؤال #5

SCENARIO Please use the following to answer the next QUESTION: As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others

A. Data Lifecycle Management Standards

B. United Nations Privacy Agency Standards

C. International Organization for Standardization 9000 Series

D. International Organization for Standardization 27000 Series

عرض الإجابة

اجابة صحيحة: D

السؤال #6

What is one reason the European Union has enacted more comprehensive privacy laws than the United States?

A. To ensure adequate enforcement of existing laws

B. To ensure there is adequate funding for enforcement

C. To allow separate industries to set privacy standards

D. To allow the free movement of data between member countries

عرض الإجابة

اجابة صحيحة: D

السؤال #7

SCENARIO Please use the following to answer the next QUESTION: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although IgNight's customer base consists primarily of offices in the US, some individuals have been so impressed by the unique aesthetic and energy-saving design of the light fixtures that they have requested IgNight's installations in their homes across the globe. One Sunday morning, while using his work laptop to purchase tickets for an

A. Tabletop exercises

B. Update its data inventory

C. IT security awareness training

D. Share communications relating to scheduled maintenance

عرض الإجابة

اجابة صحيحة: A

السؤال #8

SCENARIO Please use the following to answer the next QUESTION: As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others

A. Through targeted curricula designed for specific departments

B. By adopting e-learning to reduce the need for instructors

C. By using industry standard off-the-shelf programs

D. Through a review of recent data breaches

عرض الإجابة

اجابة صحيحة: A

السؤال #9

SCENARIO Please use the following to answer the next QUESTION: Penny has recently joined Ace Space, a company that sells homeware accessories online, as its new privacy officer. The company is based in California but thanks to some great publicity from a social media influencer last year, the company has received an influx of sales from the EU and has set up a regional office in Ireland to support this expansion. To become familiar with Ace Space’s practices and assess what her privacy priorities will be, P

A. Ace Space’s documented procedurescorrect

B. Ace Space’s employee training program

C. Ace Space’s vendor engagement protocols

D. Ace Space’s content sharing practices on social media

عرض الإجابة

اجابة صحيحة: A

السؤال #10

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. All faxes sent from the office must be documented and the phone number used must be double checked to ensure a safe arrival

B. All unused copies, prints, and faxes must be discarded in a designated recycling bin located near the work station and emptied daily

C. Before any copiers, printers, or fax machines are replaced or resold, the hard drives of thesedevices must be deleted before leaving the office

D. When sending a print job containing personal data, the user must not leave the information visible on the computer screen following the print command and must retrieve the printed document immediately

عرض الإجابة

اجابة صحيحة: B

السؤال #11

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. The role of privacy in retail companies

B. The necessary maturity level of privacy programs

C. The possibility of delegating responsibilities related to privacycorrect

D. The requirements for a managerial position with privacy protection duties

عرض الإجابة

اجابة صحيحة: C

السؤال #12

“Collection,” “access” and “destruction” are aspects of what privacy management process?

A. The data governance strategycorrect

B. The breach response plan

C. The metric life cycle

D. The business case

عرض الإجابة

اجابة صحيحة: A

السؤال #13

As a Data Protection Officer, one of your roles entails monitoring changes in laws and regulations and updating policies accordingly. How would you most effectively execute this responsibility?

A. Consult an external lawyer

B. Regularly engage regulators

C. Attend workshops and interact with other professionals

D. Subscribe to email list-serves that report on regulatory changes

عرض الإجابة

اجابة صحيحة: D

السؤال #14

SCENARIO Please use the following to answer the next QUESTION: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although IgNight's customer base consists primarily of offices in the US, some individuals have been so impressed by the unique aesthetic and energy-saving design of the light fixtures that they have requested IgNight's installations in their homes across the globe. One Sunday morning, while using his work laptop to purchase tickets for an

A. Availability Breach

B. Authenticity Breach

C. Confidentiality Breach

D. Integrity Breach

عرض الإجابة

اجابة صحيحة: C

السؤال #15

SCENARIO Please use the following to answer the next question: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry has always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. The timeline for monitoring

B. The method of recordkeepingcorrect

C. The use of internal employees

D. The type of required qualifications

عرض الإجابة

اجابة صحيحة: B

السؤال #16

Which statement is FALSE regarding the use of technical security controls?

A. Technical security controls are part of a data governance strategy

B. Technical security controls deployed for one jurisdiction often satisfy another jurisdiction

C. Most privacy legislation lists the types of technical security controls that must be implemented

D. A person with security knowledge should be involved with the deployment of technical security controls

عرض الإجابة

اجابة صحيحة: C

السؤال #17

Which of the following privacy frameworks are legally binding?

A. Binding Corporate Rules (BCRs)

B. Generally Accepted Privacy Principles (GAPP)

C. Asia-Pacific Economic Cooperation (APEC) Privacy Framework

D. Organization for Economic Co-Operation and Development (OECD) Guidelines

عرض الإجابة

اجابة صحيحة: A

السؤال #18

All of the following changes will likely trigger a data inventory update EXCEPT?

A. Outsourcing the Customer Relationship Management (CRM) function

B. Acquisition of a new subsidiary

C. Onboarding of a new vendor

D. Passage of a new privacy regulation

عرض الإجابة

اجابة صحيحة: D

السؤال #19

SCENARIO Please use the following to answer the next QUESTION: It's just what you were afraid of. Without consulting you, the information technology director at your organization launched a new initiative to encourage employees to use personal devices for conducting business. The initiative made purchasing a new, high-specification laptop computer an attractive option, with discounted laptops paid for as a payroll deduction spread over a year of paychecks. The organization is also paying the sales taxes. It

A. User risk training

B. Biometric security

C. Encryption of the data

D. Frequent data backups

عرض الإجابة

اجابة صحيحة: A

السؤال #20

SCENARIO Please use the following to answer the next QUESTION: As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the targe

A. An external audit conducted by a panel of industry experts

B. An internal audit team accountable to upper management

C. Creat ion of a self-certification framework based on company policies

D. Revision of the strategic plan to provide a system of technical controlscorrect

عرض الإجابة

اجابة صحيحة: D

السؤال #21

SCENARIO Please use the following to answer the next QUESTION: Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to Question the company's privacy program at today's m

A. Varying the modes of communication

B. Communicating to the staff more often

C. Improving inter-departmental cooperation

D. Requiring acknowledgment of company memos

عرض الإجابة

اجابة صحيحة: A

السؤال #22

What is the key factor that lays the foundation for all other elements of a privacy program?

A. The applicable privacy regulationscorrect

B. The structure of a privacy team

C. A privacy mission statement

D. A responsible internal stakeholder

عرض الإجابة

اجابة صحيحة: A

السؤال #23

What is the function of the privacy operational life cycle?

A. It establishes initial plans for privacy protection and implementationcorrect

B. It allows the organization to respond to ever-changing privacy demands

C. It ensures that outdated privacy policies are retired on a set schedule

D. It allows privacy policies to mature to a fixed form

عرض الإجابة

اجابة صحيحة: A

السؤال #24

What is the best way to understand the location, use and importance of personal data within an organization?

A. By analyzing the data inventory

B. By testing the security of data systems

C. By evaluating methods for collecting datacorrect

D. By interviewing employees tasked with data entry

عرض الإجابة

اجابة صحيحة: C

السؤال #25

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. Gramm-Leach-Bliley Act (GLBA)

B. The General Data Protection Regulation (GDPR)

C. The Telephone Consumer Protection Act (TCPA)

D. Health Insurance Portability and Accountability Act (HIPAA)correct

عرض الإجابة

اجابة صحيحة: D

السؤال #26

SCENARIO - Please use the following to answer the next question: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packagi

A. Obtain express written consent from users of the Handy Helper regarding marketing

B. Work with Sanjay to review any necessary privacy requirements to be built into the product

C. Certify that the Handy Helper meets the requirements of the EU-US Privacy Shield Framework

D. Build the artificial intelligence feature so that users would not have to input sensitive information into the Handy Helper

عرض الإجابة

اجابة صحيحة: B

السؤال #27

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Include notification provisions in the vendor contractcorrect

B. Arrange regular telephone check-ins reviewing expectations

C. Send a memorandum of understanding on breach notification

D. Email the regulations that require breach notifications

عرض الإجابة

اجابة صحيحة: A

السؤال #28

SCENARIO Please use the following to answer the next QUESTION: Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Add security cameras at facilities that are now without them

B. Set policies about the purpose and use of the security cameras

C. Reduce the number of security cameras located inside the building

D. Restrict access to surveillance video taken by the security cameras and destroy the recordings after a designated period of time

عرض الإجابة

اجابة صحيحة: D

السؤال #29

What United States federal law requires financial institutions to declare their personal data collection practices?

A. The Kennedy-Hatch Disclosure Act of 1997

B. The Gramm-Leach-Bliley Act of 1999

C. SUPCLA, or the federal Superprivacy Act of 2001

D. The Financial Portability and Accountability Act of 2006

عرض الإجابة

اجابة صحيحة: B

السؤال #30

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Obtain express written consent from users of the Handy Helper regarding marketing

B. Work with Sanjay to review any necessary privacy requirements to be built into the product

C. Certify that the Handy Helper meets the requirements of the EU-US Privacy Shield Framework

D. Build the artificial intelligence feature so that users would not have to input sensitive information into the Handy Helper

عرض الإجابة

اجابة صحيحة: C

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated IAPP Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان