Success Secrets: CIPM Exam Questions & Mock Tests, Certificate in Investment Performance Measurement

Question #1

An organization's privacy officer was just notified by the benefits manager that she accidentally sent out the retirement enrollment report of all employees to a wrong vendor. Which of the following actions should the privacy officer take first?

A. Perform a risk of harm analysis

B. Report the incident to law enforcement

C. Contact the recipient to delete the email

D. Send firm-wide email notification to employees

View answer

Correct Answer: B

Question #2

A minimum requirement for carrying out a Data Protection Impact Assessment (DPIA) wouldinclude?

A. Processing on a large scale of special categories of data

B. Monitoring of a publicly accessible area on a large scale

C. Assessment of the necessity and proportionality

D. Assessment of security measures

View answer

Correct Answer: C

Question #3

Which of the following privacy frameworks are legally binding?

A. Binding Corporate Rules (BCRs)

B. Generally Accepted Privacy Principles (GAPP)

C. Asia-Pacific Economic Cooperation (APEC) Privacy Framework

D. Organization for Economic Co-Operation and Development (OECD) Guidelines

View answer

Correct Answer: A

Question #4

SCENARIO Please use the following to answer the next QUESTION: It's just what you were afraid of. Without consulting you, the information technology director at your organization launched a new initiative to encourage employees to use personal devices for conducting business. The initiative made purchasing a new, high-specification laptop computer an attractive option, with discounted laptops paid for as a payroll deduction spread over a year of paychecks. The organization is also paying the sales taxes. It

A. As the accidental loss of personal property containing data that must be restored

B. As a potential compromise of personal information through unauthorized access

C. As an incident that requires the abrupt initiation of a notification campaign

D. As the premeditated theft of company data, until shown otherwise

View answer

Correct Answer: C

Question #5

Which of the following best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

A. Employees must sign an ad hoc contractual agreement each time personal data is exported

B. All employees are subject to the rules in their entirety, regardless of where the work is taking place

C. All employees must follow the privacy regulations of the jurisdictions where the current scope of their work is established

D. Employees who control personal data must complete a rigorous certification procedure, as they are exempt from legal enforcement

View answer

Correct Answer: A

Question #6

What is most critical when outsourcing data destruction service?

A. Obtain a certificate of data destruction

B. Confirm data destruction must be done on-site

C. Conduct an annual in-person audit of the provider’s facilities

D. Ensure that they keep an asset inventory of the original data

View answer

Correct Answer: D

Question #7

Your company wants to convert paper records that contain customer personal information intoelectronic form, upload the records into a new third-party marketing tool and then merge thecustomer personal information in the marketing tool with information from other applications.As the Privacy Officer, which of the following should you complete to effectively make thesechanges?

A. A Record of Authority

B. A Personal Data Inventory

C. A Privacy Threshold Analysis (PTA)

D. A Privacy Impact Assessment (PIA)

View answer

Correct Answer: B

Question #8

Which of the following actions is NOT required during a data privacy diligence process for Merger &Acquisition (M&A) deals?

A. Revise inventory of applications that house personal data and data mapping

B. Update business processes to handle Data Subject Requests (DSRs)

C. Compare the original use of personal data to post-merger use

D. Perform a privacy readiness assessment before the deal

View answer

Correct Answer: D

Question #9

SCENARIO Please use the following to answer the next QUESTION: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current user

A. Include appropriate language about privacy protection in vendor contracts

B. Perform a privacy audit on any vendor under consideration

C. Require that a person trained in privacy protection be part of all vendor selection teams

D. Do business only with vendors who are members of privacy trade associations

View answer

Correct Answer: A

Question #10

When devising effective employee policies to address a particular issue, which of the followingshould be included in the first draft?

A. Rationale for the policy

B. Points of contact for the employee

C. Roles and responsibilities of the different groups of individuals

D. Explanation of how the policy is applied within the organization

View answer

Correct Answer: B

Question #11

You would like your organization to be independently audited to demonstrate compliance with international privacy standards and to identify gaps for remediation. Which type of audit would help you achieve this objective?

A. First-party audit

B. Second-party audit

C. Third-party audit

D. Fourth-party audit

View answer

Correct Answer: A

Question #12

SCENARIO Please use the following to answer the next QUESTION: Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Han

A. Training needs must be weighed against financial costs

B. Training on local laws must be implemented for all personnel

C. Training must be repeated frequently to respond to new legislation

D. Training must include assessments to verify that the material is mastered

View answer

Correct Answer: A

Question #13

Which of the following best supports implementing controls to bring privacy policies into effect?

A. The internal audit department establishing the audit controls which test for policy effectiveness

B. The legal department or outside counsel conducting a thorough review of the privacy program and policies

C. The Chief Information Officer as part of the Senior Management Team creating enterprise privacy policies to ensure controls are available

D. The information technology (IT) group supporting and enhancing the privacy program and privacy policy by developing processes and controls

View answer

Correct Answer: A

Question #14

Which term describes a piece of personal data that alone may not identify an individual?

A. Unbundled data

B. A singularity

C. Non-aggregated infopoint

D. A single attribute

View answer

Correct Answer: C

Question #15

SCENARIO Please use the following to answer the next QUESTION: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all aspects of an online store for several years. As a small nonprofit, the Society cannot afford the higher-priced options, but you have been relatively satisfied with this budget vendor, Shopping Cart Saver (SCS). Yes, there have been some issues. Twice, people who purchased items from the store have had their credit card information u

A. A second-party of supplier audit

B. A reference check with other clients

C. A table top demonstration of a potential threat

D. A public records search for earlier legal violations

View answer

Correct Answer: B

Question #16

Which is TRUE about the scope and authority of data protection oversight authorities?

A. The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators

B. All authority in the European Union rests with the Data Protection Commission (DPC)

C. No one agency officially oversees the enforcement of privacy regulations in the United States

D. The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority

View answer

Correct Answer: A

Question #17

When building a data privacy program, what is a good starting point to understand the scope ofprivacy program needs?

A. Perform Data Protection Impact Assessments (DPIAs)

B. Perform Risk Assessments

C. Complete a Data Inventory

D. Review Audits

View answer

Correct Answer: C

Question #18

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production – not data processing – and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. Practicing data minimalism

B. Ensuring data retrievability

C. Implementing clear policies

D. Ensuring adequacy of infrastructure

View answer

Correct Answer: A

Question #19

SCENARIO Please use the following to answer the next QUESTION: Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production – not data processing – and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers.

A. The timeline for monitoring

B. The method of recordkeeping

C. The use of internal employees

D. The type of required qualifications

View answer

Correct Answer: A

Question #20

SCENARIO Please use the following to answer the next QUESTION: Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow. With the expa

A. Outsourcing the hotline

B. A system for staff education

C. Strict communication channels

D. An ethics complaint department

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Success Secrets: CIPM Exam Questions & Mock Tests, Certificate in Investment Performance Measurement | SPOTO

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Success Secrets: CIPM Exam Questions & Mock Tests, Certificate in Investment Performance Measurement | SPOTO

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now