2024 Updated CIPM Exam Questions & Practice Tests, Certificate in Investment Performance Measurement

Question #1

SCENARIO Please use the following to answer the next QUESTION: As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the targe

A. Brainstorm methods for developing an enhanced privacy framework

B. Develop a strong marketing strategy to communicate the company’s privacy practices

C. Focus on improving the incident response plan in preparation for any breaks in protection

D. Shift attention to privacy for emerging technologies as the company begins to use them

View answer

Correct Answer: B

Question #2

SCENARIO Please use the following to answer the next QUESTION: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. You convened it to diffuse blame

B. The council has an overabundance of attorneys

C. It takes eight hours of emails to come to a decision

D. The leader just joined the company as a consultant

View answer

Correct Answer: D

Question #3

When implementing Privacy by Design (PbD), what would NOT be a key consideration?

A. Collection limitation

B. Data minimization

C. Limitations on liability

D. Purpose specification

View answer

Correct Answer: A

Question #4

What is a key feature of the privacy metric template adapted from the National Institute of Standards and Technology (NIST)?

A. It provides suggestions about how to collect and measure data

B. It can be tailored to an organization's particular needs

C. It is updated annually to reflect changes in government policy

D. It is focused on organizations that do business internationally

View answer

Correct Answer: D

Question #5

A Human Resources director at a company reported that a laptop containing employee payroll data was lost on the train. Which action should the company take IMMEDIATELY?

A. Report the theft to law enforcement

B. Wipe the hard drive remotely

C. Report the theft to the senior management

D. Perform a multi-factor risk analysis

View answer

Correct Answer: B

Question #6

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. The vendor will be required to report any privacy violations to the appropriate authorities

B. The vendor may not be aware of the privacy implications involved in the project

C. The vendor may not be forthcoming about the vulnerabilities of the database

D. The vendor will be in direct contact with all of the law firm's personal data

View answer

Correct Answer: A

Question #7

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Document the data flows for the collected data

B. Conduct a Privacy Impact Assessment (PIA) to evaluate the risks involved

C. Implement a policy restricting data access on a "need to know" basis

D. Limit data transfers to the US by keeping data collected in Europe within a local data center

View answer

Correct Answer: C

Question #8

SCENARIO Please use the following to answer the next QUESTION: Penny has recently joined Ace Space, a company that sells homeware accessories online, as its new privacy officer. The company is based in California but thanks to some great publicity from a social media influencer last year, the company has received an influx of sales from the EU and has set up a regional office in Ireland to support this expansion. To become familiar with Ace Space’s practices and assess what her privacy priorities will be, P

A. Analyze the data inventory to map data flows

B. Audit all vendors’ privacy practices and safeguards

C. Conduct a Privacy Impact Assessment for the company

D. Review all cloud contracts to identify the location of data servers used

View answer

Correct Answer: C

Question #9

In addition to regulatory requirements and business practices, what important factors must a global privacy strategy consider?

A. Monetary exchange

B. Geographic features

C. Political history

D. Cultural norms

View answer

Correct Answer: A

Question #10

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box – a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. The role of privacy in retail companies

B. The necessary maturity level of privacy programs

C. The possibility of delegating responsibilities related to privacy

D. The requirements for a managerial position with privacy protection duties

View answer

Correct Answer: A

Question #11

For an organization that has just experienced a data breach, what might be the least relevant metric for a company's privacy and governance team?

A. The number of security patches applied to company devices

B. The number of privacy rights requests that have been exercised

C. The number of Privacy Impact Assessments that have been completed

D. The number of employees who have completed data awareness training

View answer

Correct Answer: B

Question #12

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Obtain express written consent from users of the Handy Helper regarding marketing

B. Work with Sanjay to review any necessary privacy requirements to be built into the product

C. Certify that the Handy Helper meets the requirements of the EU-US Privacy Shield Framework

D. Build the artificial intelligence feature so that users would not have to input sensitive information into the Handy Helper

View answer

Correct Answer: C

Question #13

SCENARIO Please use the following to answer the next QUESTION: As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the targe

A. Procedures or processes exist, however they are not fully documented and do not cover all relevant aspects

B. Procedures and processes are fully documented and implemented, and cover all relevant aspects

C. Reviews are conducted to assess the effectiveness of the controls in place

D. Regular review and feedback are used to ensure continuous improvement toward optimization of the given process

View answer

Correct Answer: C

Question #14

SCENARIO Please use the following to answer the next QUESTION: Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Add security cameras at facilities that are now without them

B. Set policies about the purpose and use of the security cameras

C. Reduce the number of security cameras located inside the building

D. Restrict access to surveillance video taken by the security cameras and destroy the recordings after a designated period of time

View answer

Correct Answer: C

Question #15

What is the function of the privacy operational life cycle?

A. It establishes initial plans for privacy protection and implementation

B. It allows the organization to respond to ever-changing privacy demands

C. It ensures that outdated privacy policies are retired on a set schedule

D. It allows privacy policies to mature to a fixed form

View answer

Correct Answer: C

Question #16

SCENARIO Please use the following to answer the next QUESTION: As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others

A. Privacy by Design

B. Privacy Step Assessment

C. Information Security Planning

D. Innovation Privacy Standards

View answer

Correct Answer: B

Question #17

SCENARIO Please use the following to answer the next QUESTION: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Implement a more comprehensive suite of information security controls than the one used by the vendor

B. Ask the vendor for verifiable information about their privacy protections so weaknesses can be identified

C. Develop security protocols for the vendor and mandate that they be deployed

D. Insist on an audit of the vendor's privacy procedures and safeguards

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

2024 Updated CIPM Exam Questions & Practice Tests, Certificate in Investment Performance Measurement | SPOTO

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

2024 Updated CIPM Exam Questions & Practice Tests, Certificate in Investment Performance Measurement | SPOTO

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now