Latest IAPP CIPM Free Exam Questions

Question #1

Read the following steps: ? Perform frequent data back-ups. ? Perform test restorations to verify integrity of backed-up data. ? Maintain backed-up data offline or on separate servers. These steps can help an organization recover from what?

A. Phishing attacks

B. Authorization errors

C. Ransomware attackscorrect

D. Stolen encryption keys

View answer

Correct Answer: C

Question #2

Which of the following privacy frameworks are legally binding?

A. Binding Corporate Rules (BCRs)

B. Generally Accepted Privacy Principles (GAPP)

C. Asia-Pacific Economic Cooperation (APEC) Privacy Framework

D. Organization for Economic Co-Operation and Development (OECD) Guidelines

View answer

Correct Answer: A

Question #3

Which of the following best demonstrates the effectiveness of a firm’s privacy incident response process?

A. The decrease of security breaches

B. The decrease of notifiable breaches

C. The increase of privacy incidents reported by users

D. The decrease of mean time to resolve privacy incidentscorrect

View answer

Correct Answer: D

Question #4

Which statement is FALSE regarding the use of technical security controls?

A. Technical security controls are part of a data governance strategy

B. Technical security controls deployed for one jurisdiction often satisfy another jurisdiction

C. Most privacy legislation lists the types of technical security controls that must be implemented

D. A person with security knowledge should be involved with the deployment of technical security controls

View answer

Correct Answer: C

Question #5

In privacy protection, what is a "covered entity"?

A. Personal data collected by a privacy organization

B. An organization subject to the privacy provisions of HIPAcorrect

C. A privacy office or team fully responsible for protecting personal information

D. Hidden gaps in privacy protection that may go unnoticed without expert analysis

View answer

Correct Answer: B

Question #6

SCENARIO Please use the following to answer the next QUESTION: As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others

A. Data Lifecycle Management Standards

B. United Nations Privacy Agency Standards

C. International Organization for Standardization 9000 Series

D. International Organization for Standardization 27000 Series

View answer

Correct Answer: D

Question #7

What is a key feature of the privacy metric template adapted from the National Institute of Standards and Technology (NIST)?

A. It provides suggestions about how to collect and measure data

B. It can be tailored to an organization's particular needs

C. It is updated annually to reflect changes in government policy

D. It is focused on organizations that do business internationally

View answer

Correct Answer: B

Question #8

Which of the following controls does the PCI DSS framework NOT require?

A. Implement strong asset control protocols

B. Implement strong access control measures

C. Maintain an information security policy

D. Maintain a vulnerability management program

View answer

Correct Answer: A

Question #9

What have experts identified as an important trend in privacy program development?

A. The narrowing of regulatory definitions of personal information

B. The rollback of ambitious programs due to budgetary restraints

C. The movement beyond crisis management to proactive prevention

D. The stabilization of programs as the pace of new legal mandates slows

View answer

Correct Answer: C

Question #10

SCENARIO Please use the following to answer the next QUESTION: Richard McAdams recently graduated law school and decided to return to the small town of Lexington, Virginia to help run his aging grandfather's law practice. The elder McAdams desired a limited, lighter role in the practice, with the hope that his grandson would eventually take over when he fully retires. In addition to hiring Richard, Mr. McAdams employs two paralegals, an administrative assistant, and a part-time IT specialist who handles all

A. Prioritizing the data by order of importance

B. Minimizing the time it takes to retrieve the sensitive data

C. Reducing the volume and the type of data that is stored in its system

D. Increasing the number of experienced staff to code and categorize the incoming data

View answer

Correct Answer: C

Question #11

What should a privacy professional keep in mind when selecting which metrics to collect?

A. Metrics should be reported to the public

B. The number of metrics should be limited at first

C. Metrics should reveal strategies for increasing company earnings

D. A variety of metrics should be collected before determining their specific functions

View answer

Correct Answer: B

Question #12

SCENARIO Please use the following to answer the next QUESTION: Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments. After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide. The packaging

A. Document the data flows for the collected data

B. Conduct a Privacy Impact Assessment (PIA) to evaluate the risks involved

C. Implement a policy restricting data access on a "need to know" basis

D. Limit data transfers to the US by keeping data collected in Europe within a local data center

View answer

Correct Answer: C

Question #13

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. The company needs to have policies and procedures in place to guide the purchasing decisions

B. The privacy notice for customers and the Business Continuity Plan (BCP) still need to be reviewed

C. Staff members across departments need time to review technical information concerning any new databases

D. Senior staff members need to first commit to adopting a minimum number of Privacy Enhancing Technologies (PETs)

View answer

Correct Answer: A

Question #14

In a sample metric template, what does “target” mean?

A. The suggested volume of data to collectcorrect

B. The percentage of completion

C. The threshold for a satisfactory rating

D. The frequency at which the data is sampled

View answer

Correct Answer: A

Question #15

SCENARIO Please use the following to answer the next QUESTION: For 15 years, Albert has worked at Treasure Box C a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motiva

A. The role of privacy in retail companies

B. The necessary maturity level of privacy programs

C. The possibility of delegating responsibilities related to privacycorrect

D. The requirements for a managerial position with privacy protection duties

View answer

Correct Answer: C

Question #16

SCENARIO Please use the following to answer the next QUESTION: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Forensic inquiry

B. Data mapping

C. Privacy breach prevention

D. Vendor due diligence vetting

View answer

Correct Answer: D

Question #17

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. Outsourcing the hotline

B. A system for staff education

C. Strict communication channels

D. An ethics complaint department

View answer

Correct Answer: B

Question #18

Which term describes a piece of personal data that alone may not identify an individual?

A. Unbundled datacorrect

B. A singularity

C. Non-aggregated infopoint

D. A single attribute

View answer

Correct Answer: A

Question #19

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Include notification provisions in the vendor contractcorrect

B. Arrange regular telephone check-ins reviewing expectations

C. Send a memorandum of understanding on breach notification

D. Email the regulations that require breach notifications

View answer

Correct Answer: A

Question #20

Which of the following is TRUE about a PIA (Privacy Impact Analysis)?

A. Any project that involves the use of personal data requires a PIAcorrect

B. A Data Protection Impact Analysis (DPIA) process includes a PIA

C. The PIA must be conducted at the early stages of the project lifecycle

D. The results from a previous information audit can be leveraged in a PIA process

View answer

Correct Answer: A

Question #21

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. Deceptive practices

B. Failing to institute the hotline

C. Failure to notify of processing

D. Negligence in consistent training

View answer

Correct Answer: A

Question #22

What is a key feature of the privacy metric template adapted from the National Institute of Standards and Technology (NIST)?

A. It provides suggestions about how to collect and measure data

B. It can be tailored to an organization's particular needs

C. It is updated annually to reflect changes in government policy

D. It is focused on organizations that do business internationally

View answer

Correct Answer: A

Question #23

Which of the following privacy frameworks are legally binding?

A. Binding Corporate Rules (BCRs)

B. Generally Accepted Privacy Principles (GAPP)

C. Asia-Pacific Economic Cooperation (APEC) Privacy Framework

D. Organization for Economic Co-Operation and Development (OECD) Guidelines

View answer

Correct Answer: A

Question #24

What does it mean to “rationalize” data protection requirements?

A. Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties

B. Look for overlaps in laws and regulations from which a common solution can be developedcorrect

C. Determine where laws and regulations are redundant in order to eliminate some from requiring compliance

D. Address the less stringent laws and regulations, and inform stakeholders why they are applicable

View answer

Correct Answer: B

Question #25

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. The timeline for monitoring

B. The method of recordkeeping

C. The use of internal employees

D. The type of required qualifications

View answer

Correct Answer: A

Question #26

Which of the following is TRUE about the Data Protection Impact Assessment (DPIA) process as required under the General Data Protection Regulation (GDPR)?

A. The DPIA result must be reported to the corresponding supervisory authority

B. The DPIA report must be published to demonstrate the transparency of the data processing

C. The DPIA must include a description of the proposed processing operation and its purpose

D. The DPIA is required if the processing activity entails risk to the rights and freedoms of an EU individual

View answer

Correct Answer: C

Question #27

SCENARIO Please use the following to answer the next QUESTION: Penny has recently joined Ace Space, a company that sells homeware accessories online, as its new privacy officer. The company is based in California but thanks to some great publicity from a social media influencer last year, the company has received an influx of sales from the EU and has set up a regional office in Ireland to support this expansion. To become familiar with Ace Space’s practices and assess what her privacy priorities will be, P

A. Audit rights

B. Liability for a data breach

C. Pricing for data security protectionscorrect

D. The data a vendor will have access to

View answer

Correct Answer: C

Question #28

Which is NOT an influence on the privacy environment external to an organization?

A. Management team priorities

B. Regulations

C. Consumer demand

D. Technological advances

View answer

Correct Answer: A

Question #29

SCENARIO Please use the following to answer the next QUESTION: John is the new privacy officer at the prestigious international law firm C A&M LLP. A&M LLP is very proud of its reputation in the practice areas of Trusts & Estates and Merger & Acquisition in both U.S. and Europe. During lunch with a colleague from the Information Technology department, John heard that the Head of IT, Derrick, is about to outsource the firm's email continuity service to their existing email security vendor C MessageSafe. Bein

A. Cloud Inc

B. MessageSafe is liable if Cloud Inc

C. Cloud Inc

D. A&M LLP's service contract must be amended to list Cloud Inc

View answer

Correct Answer: A

Question #30

SCENARIO Please use the following to answer the next question: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry has always focused on production C not data processing C and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. Practicing data minimalismcorrect

B. Ensuring data retrievability

C. Implementing clear policies

D. Ensuring adequacy of infrastructure

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Latest IAPP CIPM Free Exam Questions | SPOTO

View The Updated IAPP Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Latest IAPP CIPM Free Exam Questions | SPOTO

View The Updated IAPP Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now