لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
You would like your organization to be independently audited to demonstrate compliance with international privacy standards and to identify gaps for remediation.Which type of audit would help you achieve this objective?
A. First-party audit
B. Second-party audit
C. Third-party audit
D. Fourth-party audit
عرض الإجابة
اجابة صحيحة: C
السؤال #2
For an organization that has just experienced a data breach, what might be the least relevant metric for a company's privacy and governance team?
A. The number of security patches applied to company devices
B. The number of privacy rights requests that have been exercised
C. The number of Privacy Impact Assessments that have been completed
D. The number of employees who have completed data awareness training
عرض الإجابة
اجابة صحيحة: A
السؤال #3
An organization's business continuity plan or disaster recovery plan does NOT typically include what?
A. Recovery time objectives
B. Emergency response guidelines
C. Statement of organizational responsibilities
D. Retention schedule for storage and destruction of information
عرض الإجابة
اجابة صحيحة: D
السؤال #4
SCENARIO -Please use the following to answer the next question:Natalia, the Chief Financial Officer (CFO) of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to question the company'
A. The amount of responsibility that a data controller retains
B. The appropriate role of an organization's security department
C. The degree to which training can lessen the number of security incidents
D. The role of Human Resources employees in an organization's privacy program
عرض الإجابة
اجابة صحيحة: C
السؤال #5
SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user
A. Include appropriate language about privacy protection in vendor contracts
B. Perform a privacy audit on any vendor under consideration
C. Require that a person trained in privacy protection be part of all vendor selection teams
D. Do business only with vendors who are members of privacy trade associations
عرض الإجابة
اجابة صحيحة: C
السؤال #6
In which situation would a Privacy Impact Assessment (PIA) be the least likely to be required?
A. If a company created a credit-scoring platform five years ago
B. If a health-care professional or lawyer processed personal data from a patient's file
C. If a social media company created a new product compiling personal data to generate user profiles
D. If an after-school club processed children's data to determine which children might have food allergies
عرض الإجابة
اجابة صحيحة: D
السؤال #7
SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user
A. Requiring the vendor to complete a questionnaire assessing International Organization for Standardization (ISO) 27001 compliance
B. Conducting a physical audit of the vendor's facilities
C. Conducting a penetration test of the vendor's data security structure
D. Examining investigation records of any breaches the vendor has experienced
عرض الإجابة
اجابة صحيحة: D
السؤال #8
SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han
A. Add security cameras at facilities that are now without them
B. Set policies about the purpose and use of the security cameras
C. Reduce the number of security cameras located inside the building
D. Restrict access to surveillance video taken by the security cameras and destroy the recordings after a designated period of time
عرض الإجابة
اجابة صحيحة: B
السؤال #9
SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han
A. Training needs must be weighed against financial costs
B. Training on local laws must be implemented for all personnel
C. Training must be repeated frequently to respond to new legislation
D. Training must include assessments to verify that the material is mastered
عرض الإجابة
اجابة صحيحة: B
السؤال #10
Formosa International operates in 20 different countries including the United States and France.What organizational approach would make complying with a number of different regulations easier?
A. Data mapping
B. Fair Information Practices
C. Rationalizing requirements
D. Decentralized privacy management
عرض الإجابة
اجابة صحيحة: B
السؤال #11
SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user
A. Forensic inquiry
B. Data mapping
C. Privacy breach prevention
D. Vendor due diligence or vetting
عرض الإجابة
اجابة صحيحة: D
السؤال #12
When implementing Privacy by Design (PbD), what would NOT be a key consideration?
A. Collection limitation
B. Data minimization
C. Limitations on liability
D. Purpose specification
عرض الإجابة
اجابة صحيحة: C
السؤال #13
Under the General Data Protection Regulation (GDPR), what must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?
A. An obligation on the processor to report any personal data breach to the controller within 72 hours
B. An obligation on both parties to report any serious personal data breach to the supervisory authority
C. An obligation on both parties to agree to a termination of the agreement if the other party is responsible for a personal data breach
D. An obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches
عرض الإجابة
اجابة صحيحة: A
السؤال #14
SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user
A. Implement a more comprehensive suite of information security controls than the one used by the vendor
B. Ask the vendor for verifiable information about their privacy protections so weaknesses can be identified
C. Develop security protocols for the vendor and mandate that they be deployed
D. Insist on an audit of the vendor's privacy procedures and safeguards
عرض الإجابة
اجابة صحيحة: B
السؤال #15
SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han
A. Consult an attorney experienced in privacy law and litigation
B. Use your background and knowledge to set a course of action
C. If you know the organization is guilty, advise it to accept the punishment
D. Negotiate the terms of a settlement before formal legal action takes place
عرض الإجابة
اجابة صحيحة: A

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: