Pass Your CIPP Exam with Practice Tests 2024 Updated, Certified International Purchasing Professional

Question #1

SCENARIO Please use the following to answer the next question: Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.” Bizarrely, E

A. The Whistleblower Protection Act

B. The Stored Communications Act (SCA)

C. The National Labor Relations Act (NLRA)

D. The Fair and Accurate Credit Transactions Act (FACTA)

View answer

Correct Answer: C

Question #2

SCENARIO Please use the following to answer the next question: Matt went into his son’s bedroom one evening and found him stretched out on his bed typing on his laptop. “Doing your network?” Matt asked hopefully. “No,” the boy said. “I’m filling out a survey.” Matt looked over his son’s shoulder at his computer screen. “What kind of survey?” “It’s asking questions about my opinions.” “Let me see,” Matt said, and began reading the list of questions that his son had already answered. “It’s asking your opinion

A. Intruding upon the privacy of a family with young children

B. Collecting information from a child under the age of thirteen

C. Failing to notify of a breach of children’s private information

D. Disregarding the privacy policy of the children’s marketing industry

View answer

Correct Answer: D

Question #3

SCENARIO Please use the following to answer the next question: Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals realize their physical fitness goals through classes, individual instruction, and access to an extensive indoor gym. She has owned the company for ten years and has always been concerned about protecting customer’s privacy while maintaining the highest level of service. She is proud that she has built long-lasting customer relationships. Although Chery

A. It will help employees stay better organized

B. It will help the company meet a federal mandate

C. It will increase the security of customers’ personal information (PI)

D. It will prevent the company from collecting too much personal information (PI)

View answer

Correct Answer: C

Question #4

SCENARIO Please use the following to answer the next question: You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state

A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients

B. As part of HealthCo’s business associate agreement (BAA) with CloudHealth, HealthCo requires CloudHealth to implement security measures, including industry standard encryption practices, to adequately protect the data

A. Because HealthCo did not require CloudHealth to implement appropriate physical and administrative measures to safeguard the ePHI

B. Because HealthCo did not conduct due diligence to verify or monitor CloudHealth’s security measures

C. Because HIPAA requires the imposition of a fine if a data breach of this magnitude has occurred

D. Because CloudHealth violated its contract with HealthCo by not encrypting the ePHI

View answer

Correct Answer: B

Question #5

What is the main purpose of the Global Privacy Enforcement Network?

A. To promote universal cooperation among privacy authorities

B. To investigate allegations of privacy violations internationally

C. To protect the interests of privacy consumer groups worldwide

D. To arbitrate disputes between countries over jurisdiction for privacy laws

View answer

Correct Answer: A

Question #6

What is a legal document approved by a judge that formalizes an agreement between a governmental agency and an adverse party called?

A. A consent decree

B. Stare decisis decree

C. A judgment rider

D. Common law judgment

View answer

Correct Answer: A

Question #7

SCENARIO Please use the following to answer the next question: Declan has just started a job as a nursing assistant in a radiology department at Woodland Hospital. He has also started a program to become a registered nurse. Before taking this career path, Declan was vaguely familiar with the Health Insurance Portability and Accountability Act (HIPAA). He now knows that he must help ensure the security of his patients’ Protected Health Information (PHI). Therefore, he is thinking carefully about privacy issu

A. State the privacy policy to the patient verbally

B. Post the privacy notice in a prominent location instead

C. Direct patients to the correct area of the hospital website

D. Confirm that patients are given the privacy notice on their first visit

View answer

Correct Answer: C

Question #8

What practice do courts commonly require in order to protect certain personal information on documents, whether paper or electronic, that is involved in litigation?

A. Redaction

B. Encryption

C. DeletionD

View answer

Correct Answer: A

Question #9

An organization self-certified under Privacy Shield must, upon request by an individual, do what?

A. Suspend the use of all personal information collected by the organization to fulfill its original purpose

B. Provide the identities of third parties with whom the organization shares personal information

C. Provide the identities of third and fourth parties that may potentially receive personal information

D. Identify all personal information disclosed during a criminal investigation

View answer

Correct Answer: B

Question #10

What role does the U.S. Constitution play in the area of workplace privacy?

A. It provides enforcement resources to large employers, but not to small businesses

B. It provides legal precedent for physical information security, but not for electronic security

C. It provides contractual protections to members of labor unions, but not to employees at will

D. It provides significant protections to federal and state governments, but not to private-sector employment

View answer

Correct Answer: B

Question #11

If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

A. Uses the transferred data for limited purposes

B. Provides the same level of privacy protection as the organization

C. Notifies the organization if it can no longer meet its requirements for proper data handling

D. Enters a contract with the organization that states the third party will process data according to the consent agreement

View answer

Correct Answer: D

Question #12

Read this notice: Our website uses cookies. Cookies allow us to identify the computer or device you’re using to access the site, but they don’t identify you personally. For instructions on setting your Web browser to refuse cookies, click here. What type of legal choice does not notice provide?

A. Mandatory

B. Implied consent

C. Opt-in

D. Opt-out

View answer

Correct Answer: B

Question #13

A student has left high school and is attending a public postsecondary institution. Under what condition may a school legally disclose educational records to the parents of the student without consent?

A. If the student has not yet turned 18 years of age

B. If the student is in danger of academic suspension

C. If the student is still a dependent for tax purposes

D. If the student has applied to transfer to another institution

View answer

Correct Answer: C

Question #14

SCENARIO Please use the following to answer the next question: Declan has just started a job as a nursing assistant in a radiology department at Woodland Hospital. He has also started a program to become a registered nurse. Before taking this career path, Declan was vaguely familiar with the Health Insurance Portability and Accountability Act (HIPAA). He now knows that he must help ensure the security of his patients’ Protected Health Information (PHI). Therefore, he is thinking carefully about privacy issu

A. By being present when patients are checking in

B. By speaking to a patient without prior authorization

C. By ignoring the conversation about a potential breach

D. By following through with his plans for his upcoming paper

View answer

Correct Answer: C

Question #15

What do the Civil Rights Act, Pregnancy Discrimination Act, Americans with Disabilities Act, Age Discrimination Act, and Equal Pay Act all have in common?

A. They require employers not to discriminate against certain classes when employees use personal information

B. They require that employers provide reasonable accommodations to certain classes of employees

C. They afford certain classes of employees’ privacy protection by limiting inquiries concerning their personal information

D. They permit employers to use or disclose personal information specifically about employees who are members of certain classes

View answer

Correct Answer: A

Question #16

When does the Telemarketing Sales Rule require an entity to share a do-not-call request across its organization?

A. When the operational structures of its divisions are not transparent

B. When the goods and services sold by its divisions are very similar

C. When a call is not the result of an error or other unforeseen cause

D. When the entity manages user preferences through multiple platforms

View answer

Correct Answer: C

Question #17

Which of the following types of information would an organization generally NOT be required to disclose to law enforcement?

A. Information about medication errors under the Food, Drug and Cosmetic Act

B. Money laundering information under the Bank Secrecy Act of 1970

C. Information about workspace injuries under OSHA requirements

D. Personal health information under the HIPAA Privacy Rule

View answer

Correct Answer: D

Question #18

SCENARIO Please use the following to answer the next question: Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals realize their physical fitness goals through classes, individual instruction, and access to an extensive indoor gym. She has owned the company for ten years and has always been concerned about protecting customer’s privacy while maintaining the highest level of service. She is proud that she has built long-lasting customer relationships. Although Chery

A. Creating a more comprehensive plan for implementing a new policy

B. Spending more time understanding the company’s information goals

C. Explaining the importance of transparency in implementing a new policy

D. Removing the financial burden of the company’s employee training program

View answer

Correct Answer: B

Question #19

According to FERPA, when can a school disclose records without a student’s consent?

A. If the disclosure is not to be conducted through email to the third party

B. If the disclosure would not reveal a student’s student identification number

C. If the disclosure is to practitioners who are involved in a student’s health care

D. If the disclosure is to provide transcripts to a school where a student intends to enroll

View answer

Correct Answer: D

Question #20

A covered entity suffers a ransomware attack that affects the personal health information (PHI) of more than 500 individuals. According to Federal law under HIPAA, which of the following would the covered entity NOT have to report the breach to?

A. Department of Health and Human Services

B. The affected individuals

C. The local media

D. Medical providers

View answer

Correct Answer: D

Question #21

What are banks required to do under the Gramm-Leach-Bliley Act (GLBA)?

A. Conduct annual consumer surveys regarding satisfaction with user preferences

B. Process requests for changes to user preferences within a designated time frame

C. Provide consumers with the opportunity to opt out of receiving telemarketing phone calls

D. Offer an Opt-Out before transferring PI to an unaffiliated third party for the latter’s own use

View answer

Correct Answer: D

Question #22

The rules for “e-discovery” mainly prevent which of the following?

A. A conflict between business practice and technological safeguards

B. The loss of information due to poor data retention practices

C. The practice of employees using personal devices for work

D. A breach of an organization’s data retention program

View answer

Correct Answer: B

Question #23

Which entities must comply with the Telemarketing Sales Rule?

A. For-profit organizations and for-profit telefunders regarding charitable solicitations

B. Nonprofit organizations calling on their own behalf

C. For-profit organizations calling businesses when a binding contract exists between them

D. For-profit and not-for-profit organizations when selling additional services to establish customers

View answer

Correct Answer: D

Question #24

SCENARIO Please use the following to answer the next question: Declan has just started a job as a nursing assistant in a radiology department at Woodland Hospital. He has also started a program to become a registered nurse. Before taking this career path, Declan was vaguely familiar with the Health Insurance Portability and Accountability Act (HIPAA). He now knows that he must help ensure the security of his patients’ Protected Health Information (PHI). Therefore, he is thinking carefully about privacy issu

A. By suggesting that Declan look at the hospital’s publicly posted privacy policy

B. By assuring Declan that third parties are prevented from seeing Private Health Information (PHI)

C. By pointing out that contracts are in place to help ensure the observance of minimum security standards

D. By describing how the billing system is integrated into the hospital’s electronic health records (EHR) system

View answer

Correct Answer: C

Question #25

Which act violates the Family Educational Rights and Privacy Act of 1974 (FERPA)?

A. A K-12 assessment vendor obtains a student’s signed essay about her hometown from her school to use as an exemplar for public release

B. A university posts a public student directory that includes names, hometowns, e-mail addresses, and majors

C. A newspaper prints the names, grade levels, and hometowns of students who made the quarterly honor roll

D. University police provide an arrest report to a student’s hometown police, who suspect him of a similar crime

View answer

Correct Answer: A

Question #26

What is an exception to the Electronic Communications Privacy Act of 1986 ban on interception of wire, oral and electronic communications?

A. Where one of the parties has given consent

B. Where state law permits such interception

C. If an organization intercepts an employee’s purely personal call

D. Only if all parties have given consent

View answer

Correct Answer: C

Question #27

The Video Privacy Protection Act of 1988 restricted which of the following?

A. Which purchase records of audio visual materials may be disclosed

B. When downloading of copyrighted audio visual materials is allowed

C. When a user’s viewing of online video content can be monitored

D. Who advertisements for videos and video games may target

View answer

Correct Answer: A

Question #28

SCENARIO Please use the following to answer the next question: Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.” Bizarrely, E

A. The applicability of federal law

B. The enforceability of local law

C. The strict nature of state law

D. The definition of tort law

View answer

Correct Answer: A

Question #29

SCENARIO Please use the following to answer the next question: Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals realize their physical fitness goals through classes, individual instruction, and access to an extensive indoor gym. She has owned the company for ten years and has always been concerned about protecting customer’s privacy while maintaining the highest level of service. She is proud that she has built long-lasting customer relationships. Although Chery

A. The policy would not be considered valid if not communicated in full

B. The policy might not be implemented consistency across departments

C. Employees would not be comfortable with a policy that is put into action over time

D. Employees might not understand how the documents relate to the policy as a whole

View answer

Correct Answer: B

Question #30

SCENARIO Please use the following to answer the next question: A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer’s data handling practices. The complainant accuses the retailer of improperly disclosing her personal data, without consent, to par

A. Available data flow diagrams

B. The text of the original complaint

C. The company’s data privacy policies

D. Prevailing regulation on this subject

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Pass Your CIPP Exam with Practice Tests 2024 Updated, Certified International Purchasing Professional | SPOTO

View The Updated CIPP Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Pass Your CIPP Exam with Practice Tests 2024 Updated, Certified International Purchasing Professional | SPOTO

View The Updated CIPP Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now