Pass the CIPM Exam Easily with Updated Practice Questions

Question #1

You would like your organization to be independently audited to demonstrate compliance with international privacy standards and to identify gaps for remediation.Which type of audit would help you achieve this objective?

A. First-party audit

B. Second-party audit

C. Third-party audit

D. Fourth-party audit

View answer

Correct Answer: C

Question #2

For an organization that has just experienced a data breach, what might be the least relevant metric for a company's privacy and governance team?

A. The number of security patches applied to company devices

B. The number of privacy rights requests that have been exercised

C. The number of Privacy Impact Assessments that have been completed

D. The number of employees who have completed data awareness training

View answer

Correct Answer: A

Question #3

An organization's business continuity plan or disaster recovery plan does NOT typically include what?

A. Recovery time objectives

B. Emergency response guidelines

C. Statement of organizational responsibilities

D. Retention schedule for storage and destruction of information

View answer

Correct Answer: D

Question #4

SCENARIO -Please use the following to answer the next question:Natalia, the Chief Financial Officer (CFO) of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to question the company'

A. The amount of responsibility that a data controller retains

B. The appropriate role of an organization's security department

C. The degree to which training can lessen the number of security incidents

D. The role of Human Resources employees in an organization's privacy program

View answer

Correct Answer: C

Question #5

SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Include appropriate language about privacy protection in vendor contracts

B. Perform a privacy audit on any vendor under consideration

C. Require that a person trained in privacy protection be part of all vendor selection teams

D. Do business only with vendors who are members of privacy trade associations

View answer

Correct Answer: C

Question #6

In which situation would a Privacy Impact Assessment (PIA) be the least likely to be required?

A. If a company created a credit-scoring platform five years ago

B. If a health-care professional or lawyer processed personal data from a patient's file

C. If a social media company created a new product compiling personal data to generate user profiles

D. If an after-school club processed children's data to determine which children might have food allergies

View answer

Correct Answer: D

Question #7

SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Requiring the vendor to complete a questionnaire assessing International Organization for Standardization (ISO) 27001 compliance

B. Conducting a physical audit of the vendor's facilities

C. Conducting a penetration test of the vendor's data security structure

D. Examining investigation records of any breaches the vendor has experienced

View answer

Correct Answer: D

Question #8

SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Add security cameras at facilities that are now without them

B. Set policies about the purpose and use of the security cameras

C. Reduce the number of security cameras located inside the building

D. Restrict access to surveillance video taken by the security cameras and destroy the recordings after a designated period of time

View answer

Correct Answer: B

Question #9

SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Training needs must be weighed against financial costs

B. Training on local laws must be implemented for all personnel

C. Training must be repeated frequently to respond to new legislation

D. Training must include assessments to verify that the material is mastered

View answer

Correct Answer: B

Question #10

Formosa International operates in 20 different countries including the United States and France.What organizational approach would make complying with a number of different regulations easier?

A. Data mapping

B. Fair Information Practices

C. Rationalizing requirements

D. Decentralized privacy management

View answer

Correct Answer: B

Question #11

SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Forensic inquiry

B. Data mapping

C. Privacy breach prevention

D. Vendor due diligence or vetting

View answer

Correct Answer: D

Question #12

When implementing Privacy by Design (PbD), what would NOT be a key consideration?

A. Collection limitation

B. Data minimization

C. Limitations on liability

D. Purpose specification

View answer

Correct Answer: C

Question #13

Under the General Data Protection Regulation (GDPR), what must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?

A. An obligation on the processor to report any personal data breach to the controller within 72 hours

B. An obligation on both parties to report any serious personal data breach to the supervisory authority

C. An obligation on both parties to agree to a termination of the agreement if the other party is responsible for a personal data breach

D. An obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches

View answer

Correct Answer: A

Question #14

SCENARIO -Please use the following to answer the next question:Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Implement a more comprehensive suite of information security controls than the one used by the vendor

B. Ask the vendor for verifiable information about their privacy protections so weaknesses can be identified

C. Develop security protocols for the vendor and mandate that they be deployed

D. Insist on an audit of the vendor's privacy procedures and safeguards

View answer

Correct Answer: B

Question #15

SCENARIO -Please use the following to answer the next question:Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Consult an attorney experienced in privacy law and litigation

B. Use your background and knowledge to set a course of action

C. If you know the organization is guilty, advise it to accept the punishment

D. Negotiate the terms of a settlement before formal legal action takes place

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Pass the CIPM Exam Easily with Updated Practice Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Pass the CIPM Exam Easily with Updated Practice Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now