IAPP CIPT Exam Sample Questions

Question #1

What would be an example of an organization transferring the risks associated with a data breach?

A. Using a third-party service to process credit card transactions

B. Encrypting sensitive personal data during collection and storage

C. Purchasing insurance to cover the organization in case of a breach

D. Applying industry standard data handling practices to the organization' practices

View answer

Correct Answer: C

Question #2

Which activity would best support the principle of data quality?

A. Providing notice to the data subject regarding any change in the purpose for collecting such data

B. Ensuring that the number of teams processing personal information is limited

C. Delivering information in a format that the data subject understands

D. Ensuring that information remains accurate

View answer

Correct Answer: D

Question #3

SCENARIO Kyle is a new security compliance manager who will be responsible for coordinating and executing controls to ensure compliance with the company's information security policy and industry standards. Kyle is also new to the company, where collaboration is a core value. On his first day of new-hire orientation, Kyle's schedule included participating in meetings and observing work in the IT and compliance departments. Kyle spent the morning in the IT department, where the CIO welcomed him and explained

A. Encryption keys were previously unavailable to the organization's cloud storage host

B. Signatureless advanced malware was detected at multiple points on the organization's networks

C. Cyber criminals accessed proprietary data by running automated authentication attacks on the organization's network

D. Confidential information discussed during a strategic teleconference was intercepted by the organization's top competitor

View answer

Correct Answer: A

Question #4

Revocation and reissuing of compromised credentials is impossible for which of the following authentication techniques?

A. Biometric data

B. Picture passwords

C. Personal identifcation number

D. Radio frequency identifcation

View answer

Correct Answer: A

Question #5

SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, “I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol reali

A. Onward transfer rules

B. Digital rights management

C. Data minimization principles

D. Vendor management principles

View answer

Correct Answer: B

Question #6

What is the most important requirement to fulfll when transferring data out of an organization?

A. Ensuring the organization sending the data controls how the data is tagged by the receiver

B. Ensuring the organization receiving the data performs a privacy impact assessment

C. Ensuring the commitments made to the data owner are followed

D. Extending the data retention schedule as needed

View answer

Correct Answer: C

Question #7

SCENARIO It should be the most secure location housing data in all of Europe, if not the world. The Global Finance Data Collective (GFDC) stores fnancial information and other types of client data from large banks, insurance companies, multinational corporations and governmental agencies. After a long climb on a mountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on yo

A. A hidden network

B. A reluctant network

C. A user verifed network

D. A wireless mesh network

View answer

Correct Answer: A

Question #8

SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, `I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol reali

A. The Federal Trade Commission

B. The Department of Commerce

C. The Data Protection Authority

D. The Federal Communications Commission

View answer

Correct Answer: A

Question #9

SCENARIO It should be the most secure location housing data in all of Europe, if not the world. The Global Finance Data Collective (GFDC) stores fnancial information and other types of client data from large banks, insurance companies, multinational corporations and governmental agencies. After a long climb on a mountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on yo

A. Record encryption is asymmetric, a stronger control measure

B. Record encryption is granular, limiting the damage of potential breaches

C. Record encryption involves tag masking, so its metadata cannot be decrypted

D. Record encryption allows for encryption of personal data only

View answer

Correct Answer: B

Question #10

What is the main function of the Amnesic Incognito Live System or TAILS device?

A. It allows the user to run a self-contained computer from a USB device

B. It accesses systems with a credential that leaves no discernable tracks

C. It encrypts data stored on any computer on a network

D. It causes a system to suspend its security protocols

View answer

Correct Answer: A

Question #11

Which of the following is considered a client-side IT risk?

A. Security policies focus solely on internal corporate obligations

B. An organization increases the number of applications on its server

C. An employee stores his personal information on his company laptop

D. IDs used to avoid the use of personal data map to personal data in another database

View answer

Correct Answer: C

Question #12

What is the main function of a breach response center?

A. Detecting internal security attacks

B. Addressing privacy incidents

C. Providing training to internal constituencies

D. Interfacing with privacy regulators and governmental bodies

View answer

Correct Answer: B

Question #13

SCENARIO Wesley Energy has fnally made its move, acquiring the venerable oil and gas exploration frm Lancelot from its long-time owner David Wilson. As a member of the transition team, you have come to realize that Wilson's quirky nature affected even Lancelot's data practices, which are maddeningly inconsistent. `The old man hired and fred IT people like he was changing his necktie,` one of Wilson's seasoned lieutenants tells you, as you identify the traces of initiatives left half complete. For instance,

A. Privacy audit

B. Log collection

C. Data inventory

D. Data classifcation

View answer

Correct Answer: C

Question #14

SCENARIO - Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, `I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol rea

A. Collection limitation principles

B. Vendor management principles

C. Incident preparedness principles

D. Fair Information Practice Principles

View answer

Correct Answer: D

Question #15

SCENARIO It should be the most secure location housing data in all of Europe, if not the world. The Global Finance Data Collective (GFDC) stores fnancial information and other types of client data from large banks, insurance companies, multinational corporations and governmental agencies. After a long climb on a mountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on yo

A. De-linking of data into client-specifc packets

B. Cloud-based applications

C. Server-side controls

D. Data pruning

View answer

Correct Answer: C

Question #16

How should the sharing of information within an organization be documented?

A. With a binding contract

B. With a data fow diagram

C. With a disclosure statement

D. With a memorandum of agreement

View answer

Correct Answer: B

Question #17

SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, `I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol reali

A. Onward transfer rules

B. Digital rights management

C. Data minimization principles

D. Vendor management principles

View answer

Correct Answer: C

Question #18

A user who owns a resource wants to give other individuals access to the resource. What control would apply?

A. Mandatory access control

B. Role-based access controls

C. Discretionary access control

D. Context of authority controls

View answer

Correct Answer: C

Question #19

A key principle of an effective privacy policy is that it should be?

A. Written in enough detail to cover the majority of likely scenarios

B. Made general enough to maximize fexibility in its application

C. Presented with external parties as the intended audience

D. Designed primarily by the organization's lawyers

View answer

Correct Answer: A

Question #20

Which Organization for Economic Co-operation and Development (OECD) privacy protection principle encourages an organization to obtain an individual s consent before transferring personal information?

A. Individual participation

B. Purpose specifcation

C. Collection limitation

D. Accountability

View answer

Correct Answer: A

Question #21

SCENARIO Kyle is a new security compliance manager who will be responsible for coordinating and executing controls to ensure compliance with the company's information security policy and industry standards. Kyle is also new to the company, where collaboration is a core value. On his first day of new-hire orientation, Kyle's schedule included participating in meetings and observing work in the IT and compliance departments. Kyle spent the morning in the IT department, where the CIO welcomed him and explained

A. Investors

B. Regulators

C. Industry groups

D. Corporate researchers

View answer

Correct Answer: C

Question #22

Which Organization for Economic Co-operation and Development (OECD) privacy protection principle encourages an organization to obtain an individual s consent before transferring personal information?

A. Individual participation

B. Purpose specification

C. Collection limitation

D. Accountability

View answer

Correct Answer: AC

Question #23

SCENARIO - Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, `I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol rea

A. The Federal Trade Commission

B. The Department of Commerce

C. The Data Protection Authority

D. The Federal Communications Commission

View answer

Correct Answer: A

Question #24

What can be used to determine the type of data in storage without exposing its contents?

A. Collection records

B. Data mapping

C. Server logs

D. Metadata

View answer

Correct Answer: AD

Question #25

What is the main beneft of using dummy data during software testing?

A. The data comes in a format convenient for testing

B. Statistical disclosure controls are applied to the data

C. The data enables the suppression of particular values in a set

D. Developers do not need special privacy training to test the software

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

IAPP CIPT Exam Sample Questions | SPOTO

View The Updated IAPP Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

IAPP CIPT Exam Sample Questions | SPOTO

View The Updated IAPP Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now