Pass Your CIPM Exam with Practice Tests 2024 Updated, Certificate in Investment Performance Measurement

Question #1

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company’s product rollout schedule and a great training opportunity for current user

A. Requiring the vendor to complete a questionnaire assessing International Organization for Standardization (ISO) 27001 compliance

B. Conducting a physical audit of the vendor’s facilities

C. Conducting a penetration test of the vendor’s data security structure

D. Examining investigation records of any breaches the vendor has experienced

View answer

Correct Answer: D

Question #2

Which is NOT an influence on the privacy environment external to an organization?

A. Management team priorities

B. Regulations

C. Consumer demand

D. Technological advances

View answer

Correct Answer: C

Question #3

In regards to the collection of personal data conducted by an organization, what must the data subject be allowed to do?

A. Evaluate the qualifications of a third-party processor before any data is transferred to that processor

B. Obtain a guarantee of prompt notification in instances involving unauthorized access of the data

C. Set a time-limit as to how long the personal data may be stored by the organization

D. Challenge the authenticity of the personal data and have it corrected if needed

View answer

Correct Answer: C

Question #4

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. The vendor’s representative does not have enough experience

B. Signing a contract with CRUDLOK which lasts longer than one year

C. The company did not collect enough identifiers to monitor one’s credit

D. You are going to notify affected individuals via a letter followed by an email

View answer

Correct Answer: A

Question #5

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company’s product rollout schedule and a great training opportunity for current user

A. Forensic inquiry

B. Data mapping

C. Privacy breach prevention

D. Vendor due diligence or vetting

View answer

Correct Answer: D

Question #6

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. An open programming model that results in easy access

B. An unwillingness of cloud providers to provide security information

C. A lack of vendors in the cloud computing market

D. A reduced resilience of data structures that may lead to data loss

View answer

Correct Answer: B

Question #7

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. A second-party of supplier audit

B. A reference check with other clients

C. A table top demonstration of a potential threat

D. A public records search for earlier legal violations

View answer

Correct Answer: B

Question #8

What is one reason the European Union has enacted more comprehensive privacy laws than the United States?

A. To ensure adequate enforcement of existing laws

B. To ensure there is adequate funding for enforcement

C. To allow separate industries to set privacy standards

D. To allow the free movement of data between member countries

View answer

Correct Answer: D

Question #9

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company’s product rollout schedule and a great training opportunity for current user

A. Include appropriate language about privacy protection in vendor contracts

B. Perform a privacy audit on any vendor under consideration

C. Require that a person trained in privacy protection be part of all vendor selection teams

D. Do business only with vendors who are members of privacy trade associations

View answer

Correct Answer: C

Question #10

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. Informing the affected individuals that data from other individuals may have also been affected

B. Collecting more personally identifiable information than necessary to provide updates to the affected individuals

C. Using a postcard with the logo of the vendor who make the mistake instead of your company’s logo

D. Trusting a vendor to send out a notice when they already failed once by not encrypting the database

View answer

Correct Answer: D

Question #11

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Include notification provisions in the vendor contract

B. Arrange regular telephone check-ins reviewing expectations

C. Send a memorandum of understanding on breach notification

D. Email the regulations that require breach notifications

View answer

Correct Answer: A

Question #12

Which of the following indicates you have developed the right privacy framework for your organization?

A. It includes a privacy assessment of each major system

B. It improves the consistency of the privacy program

C. It works at a different type of organization

D. It identifies all key stakeholders by name

View answer

Correct Answer: A

Question #13

What is the best way to understand the location, use and importance of personal data within an organization?

A. By analyzing the data inventory

B. By testing the security of data systems

C. By evaluating methods for collecting data

D. By interviewing employees tasked with data entry

View answer

Correct Answer: C

Question #14

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. The nature of the data elements impacted

B. The likelihood the incident may lead to harm

C. The likelihood that the information is accessible and usable

D. The number of individuals whose information was affected

View answer

Correct Answer: B

Question #15

In a sample metric template, what does “target” mean?

A. The suggested volume of data to collect

B. The percentage of completion

C. The threshold for a satisfactory rating

D. The frequency at which the data is sampled

View answer

Correct Answer: A

Question #16

An organization is establishing a mission statement for its privacy program. Which of the following statements would be the best to use?

A. This privacy program encourages cross-organizational collaboration which will stop all data breaches

B. Our organization was founded in 2054 to reduce the chance of a future disaster like the one that occurred ten years ago

C. The goal of the privacy program is to protect the privacy of all individuals who support our organization

D. In the next 20 years, our privacy program should be able to eliminate 80% of our current breaches

View answer

Correct Answer: C

Question #17

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company’s product rollout schedule and a great training opportunity for current user

A. Implement a more comprehensive suite of information security controls than the one used by the vendor

B. Ask the vendor for verifiable information about their privacy protections so weaknesses can be identified

C. Develop security protocols for the vendor and mandate that they be deployed

D. Insist on an audit of the vendor’s privacy procedures and safeguards

View answer

Correct Answer: B

Question #18

All of the following changes will likely trigger a data inventory update EXCEPT?

A. Outsourcing the Customer Relationship Management (CRM) function

B. Acquisition of a new subsidiary

C. Onboarding of a new vendor

D. Passage of new a privacy regulation

View answer

Correct Answer: A

Question #19

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. You convened it to diffuse blame

B. The council has an overabundance of attorneys

C. It takes eight hours of emails to come to a decision

D. The leader just joined the company as a consultant

View answer

Correct Answer: A

Question #20

What should a privacy professional keep in mind when selecting which metrics to collect?

A. Metrics should be reported to the public

B. The number of metrics should be limited at first

C. Metrics should reveal strategies for increasing company earnings

D. A variety of metrics should be collected before determining their specific functions

View answer

Correct Answer: A

Question #21

Which is TRUE about the scope and authority of data protection oversight authorities?

A. The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators

B. All authority in the European Union rests with the Data Protection Commission (DPC)

C. No one agency officially oversees the enforcement of privacy regulations in the United States

D. The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority

View answer

Correct Answer: A

Question #22

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throughout Europe and the Americas. You begin that morning’s privacy review when a contracts officer sends you a message asking for a phone call. The message lacks clarity and detail, but you presume that data was lost. When you contact the contracts officer, he tells you that he received a letter in the mail from a vendor stating that

A. The process by which affected individuals sign up for email notifications

B. Your assessment of which credit monitoring company you should hire

C. The speed at which you sat down to reflect and document the incident

D. Finding a vendor who will offer the affected individuals additional services

View answer

Correct Answer: C

Question #23

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. Restrict the vendor to using company security controls

B. Offer company resources to assist with the processing

C. Include transfer prohibitions in the vendor contract

D. Lock the data down in its current location

View answer

Correct Answer: C

Question #24

What is the main function of the Asia-Pacific Economic Cooperation Privacy Framework?

A. Enabling regional data transfers

B. Protecting data from parties outside the region

C. Establishing legal requirements for privacy protection in the region

D. Marketing privacy protection technologies developed in the region

View answer

Correct Answer: A

Question #25

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company’s product rollout schedule and a great training opportunity for current user

A. Insist upon one-on-one consultation with each person who works around the privacy officer

B. Develop a metric showing the number of initiatives launched without consultation and include it in reports, presentations, and consultation

C. Hold discussions with the department head of anyone who fails to consult with the privacy officer

D. Take your concerns straight to the Chief Executive Officer

View answer

Correct Answer: C

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Pass Your CIPM Exam with Practice Tests 2024 Updated, Certificate in Investment Performance Measurement | SPOTO

View The Updated CIPM Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Pass Your CIPM Exam with Practice Tests 2024 Updated, Certificate in Investment Performance Measurement | SPOTO

View The Updated CIPM Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now