Aug 28, 2021 Step by Step Guide to Prepare for CIPT Exam BrainDumps
Information Privacy Technologist CIPT Real Exam Questions and Answers FREE Updated on 2021
NEW QUESTION 87
When releasing aggregates, what must be performed to magnitude data to ensure privacy?
- A. Basic rounding.
- B. Top coding.
- C. Value swapping.
- D. Noise addition.
Answer: C
NEW QUESTION 88
To comply with the Sarbanes-Oxley Act (SOX), public companies in the United States are required to annually report on the effectiveness of the auditing controls of their financial reporting systems. These controls must be implemented to prevent unauthorized use, disclosure, modification, and damage or loss of financial data.
Why do these controls ensure both the privacy and security of data?
- A. Disclosure of data is an aspect of privacy; unauthorized use, modification, and damage or loss of data are aspects of security.
- B. Damage or loss of data are aspects of privacy; disclosure, unauthorized use, and modification of data are aspects of privacy.
- C. Unauthorized use of data is an aspect of privacy; disclosure, modification, and damage or loss of data are aspects of security.
- D. Modification of data is an aspect of privacy; unauthorized use, disclosure, and damage or loss of data are aspects of security.
Answer: A
NEW QUESTION 89
SCENARIO
Please use the following to answer the next question:
Chuck, a compliance auditor for a consulting firm focusing on healthcare clients, was required to travel to the client's office to perform an onsite review of the client's operations. He rented a car from Finley Motors upon arrival at the airport as so he could commute to and from the client's office. The car rental agreement was electronically signed by Chuck and included his name, address, driver's license, make/model of the car, billing rate, and additional details describing the rental transaction. On the second night, Chuck was caught by a red light camera not stopping at an intersection on his way to dinner. Chuck returned the car back to the car rental agency at the end week without mentioning the infraction and Finley Motors emailed a copy of the final receipt to the address on file.
Local law enforcement later reviewed the red light camera footage. As Finley Motors is the registered owner of the car, a notice was sent to them indicating the infraction and fine incurred. This notice included the license plate number, occurrence date and time, a photograph of the driver, and a web portal link to a video clip of the violation for further review. Finley Motors, however, was not responsible for the violation as they were not driving the car at the time and transferred the incident to AMP Payment Resources for further review. AMP Payment Resources identified Chuck as the driver based on the rental agreement he signed when picking up the car and then contacted Chuck directly through a written letter regarding the infraction to collect the fine.
After reviewing the incident through the AMP Payment Resources' web portal, Chuck paid the fine using his personal credit card. Two weeks later, Finley Motors sent Chuck an email promotion offering 10% off a future rental.
What is the most secure method Finley Motors should use to transmit Chuck's information to AMP Payment Resources?
- A. Cloud file transfer services.
- B. Transport Layer Security (TLS).
- C. Certificate Authority (CA).
- D. HyperText Transfer Protocol (HTTP).
Answer: B
NEW QUESTION 90
How does k-anonymity help to protect privacy in micro data sets?
- A. By switching values between records in order to preserve most statistics while still maintaining privacy.
- B. By top-coding all age data above a value of "k."
- C. By adding sufficient noise to the data in order to hide the impact of any one individual.
- D. By ensuring that every record in a set is part of a group of "k" records having similar identifying information. .
Answer: A
NEW QUESTION 91
SCENARIO
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camer a. EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
First and last name
Date of birth (DOB)
Mailing address
Email address
Car VIN number
Car model
License plate
Insurance card number
Photo
Vehicle diagnostics
Geolocation
All of the following technical measures can be implemented by EnsureClaim to protect personal information that is accessible by third-parties EXCEPT?
- A. Encryption.
- B. Multi-factor authentication.
- C. De-identification.
- D. Access Controls.
Answer: D
NEW QUESTION 92
SCENARIO
Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks.
As business grew, Carol couldn't keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the studio. Sam was a natural salesperson, and business doubled. Carol told Sam, "I don't know what you are doing, but keep doing it!" But months later, the gift shop was in chaos. Carol realized that Sam needed help so she hired Jane, who had business expertise and could handle the back-office tasks. Sam would continue to focus on sales. Carol gave Jane a few weeks to get acquainted with the artisan craft business, and then scheduled a meeting for the three of them to discuss Jane's first impressions.
At the meeting, Carol could not wait to hear Jane's thoughts, but she was unprepared for what Jane had to say.
"Carol, I know that he doesn't realize it, but some of Sam's efforts to increase sales have put you in a vulnerable position. You are not protecting customers' personal information like you should." Sam said, "I am protecting our information. I keep it in the safe with our bank deposit. It's only a list of customers' names, addresses and phone numbers that I get from their checks before I deposit them. I contact them when you finish a piece that I think they would like. That's the only information I have! The only other thing I do is post photos and information about your work on the photo sharing site that I use with family and friends. I provide my email address and people send me their information if they want to see more of your work. Posting online really helps sales, Carol. In fact, the only complaint I hear is about having to come into the shop to make a purchase." Carol replied, "Jane, that doesn't sound so bad. Could you just fix things and help us to post even more online?"
'I can," said Jane. "But it's not quite that simple. I need to set up a new program to make sure that we follow the best practices in data management. And I am concerned for our customers. They should be able to manage how we use their personal information. We also should develop a social media strategy." Sam and Jane worked hard during the following year. One of the decisions they made was to contract with an outside vendor to manage online sales. At the end of the year, Carol shared some exciting news. "Sam and Jane, you have done such a great job that one of the biggest names in the glass business wants to buy us out!
And Jane, they want to talk to you about merging all of our customer and vendor information with theirs beforehand." When initially collecting personal information from customers, what should Jane be guided by?
- A. Digital rights management.
- B. Vendor management principles
- C. Onward transfer rules.
- D. Data minimization principles.
Answer: A
NEW QUESTION 93
What is the distinguishing feature of asymmetric encryption?
- A. Itis designed to cross operating systems.
- B. It has a stronger key for encryption than for decryption.
- C. It uses distinct keys for encryption and decryption.
- D. It employs layered encryption using dissimilar methods.
Answer: C
NEW QUESTION 94
Which of the following is the least effective privacy preserving practice in the Systems Development Life Cycle (SDLC)?
- A. Reviewing the code against Open Web Application Security Project (OWASP) Top 10 Security Risks.
- B. Developing data flow modeling to identify sources and destinations of sensitive data.
- C. Following secure and privacy coding standards in the development.
- D. Conducting privacy threat modeling for the use-case.
Answer: B
NEW QUESTION 95
During a transport layer security (TLS) session, what happens immediately after the web browser creates a random PreMasterSecret?
- A. The server decrypts the PremasterSecret.
- B. The web browser encrypts the PremasterSecret with the server's public key.
- C. The web browser opens a TLS connection to the PremasterSecret.
- D. The server and client use the same algorithm to convert the PremasterSecret into an encryption key.
Answer: B
NEW QUESTION 96
Which of the following is an example of the privacy risks associated with the Internet of Things (loT)
- A. A website stores a cookie on a user s hard drive so the website can recognize the user on subsequent visits.
- B. A water district fines an individual after a meter reading reveals excess water use during drought conditions.
- C. A group of hackers infiltrate a power grid and cause a major blackout.
- D. An insurance company raises a person s rates based on driving habits gathered from a connected car.
Answer: C
NEW QUESTION 97
Which of the following provides a mechanism that allows an end-user to use a single sign-on (SSO) for multiple services?
- A. The Open ID Federation.
- B. International Organization for Standardization.
- C. Personal Information Protection and Electronic Documents Act.
- D. PCI Data Security Standards Council.
Answer: A
NEW QUESTION 98
Which of the following became a foundation for privacy principles and practices of countries and organizations across the globe?
- A. The EU Data Protection Directive.
- B. The Personal Data Ordinance.
- C. The Code of Fair Information Practices.
- D. The Organisation for Economic Co-operation and Development (OECD) Privacy Principles.
Answer: C
NEW QUESTION 99
SCENARIO
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephone, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in- house by Clean-Q IT Support. Because of Clean-Q's business model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:
Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation. Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q's traditional supply and demand system that has caused some overlapping bookings.
Ina business strategy session held by senior management recently, Clear-Q invited vendors to present potential solutions to their current operational issues. These vendors included Application developers and Cloud-Q's solution providers, presenting their proposed solutions and platforms.
The Managing Director opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform: A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
* A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
* A resource facing web interface that enables resources to apply and manage their assigned jobs.
* An online payment facility for customers to pay for services.
Which question would you most likely ask to gain more insight about LeadOps and provide practical privacy recommendations?
- A. How big is LeadOps' employee base?
- B. Does LeadOps practice agile development and maintenance of their system?
- C. Where are LeadOps' operations and hosting services located?
- D. What is LeadOps' annual turnover?
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 100
When should code audits be concluded?
- A. At code check-in time.
- B. While code is being sent to production.
- C. Before launch after all code for a feature is complete.
- D. At engineering design time.
Answer: C
NEW QUESTION 101
SCENARIO - Please use the following to answer the next question:
You have just been hired by Ancillary.com, a seller of accessories for everything under the sun. including waterproof stickers for pool floats and decorative bands and cases for sunglasses. The company sells cell phone cases, e-cigarette cases, wine spouts, hanging air fresheners for homes and automobiles, book ends, kitchen implements, visors and shields for computer screens, passport holders, gardening tools and lawn ornaments, and catalogs full of health and beauty products. The list seems endless. As the CEO likes to say, Ancillary offers, without doubt, the widest assortment of low-price consumer products from a single company anywhere.
Ancillary s operations are similarly diverse. The company originated with a team of sales consultants selling home and beauty products at small parties in the homes of customers, and this base business is still thriving.
However, the company now sells online through retail sites designated for industries and demographics, sites such as "My Cool Ride11 for automobile-related products or "Zoomer" for gear aimed toward young adults.
The company organization includes a plethora of divisions, units and outrigger operations, as Ancillary has been built along a decentered model rewarding individual initiative and flexibility, while also acquiring key assets. The retail sites seem to all function differently, and you wonder about their compliance with regulations and industry standards. Providing tech support to these sites is also a challenge, partly due to a variety of logins and authentication protocols.
You have been asked to lead three important new projects at Ancillary:
The first is the personal data management and security component of a multi-faceted initiative to unify the company s culture. For this project, you are considering using a series of third-party servers to provide company data and approved applications to employees.
The second project involves providing point of sales technology for the home sales force, allowing them to move beyond paper checks and manual credit card imprinting.
Finally, you are charged with developing privacy protections for a single web store housing all the company s product lines as well as products from affiliates. This new omnibus site will be known, aptly, as "Under the Sun." The Director of Marketing wants the site not only to sell Ancillary s products, but to link to additional products from other retailers through paid advertisements. You need to brief the executive team of security concerns posed by this approach.
Which should be used to allow the home sales force to accept payments using smartphones?
- A. Field transfer protocol.
- B. Radio Frequency Identification.
- C. Near-field communication.
- D. Cross-current translation.
Answer: C
NEW QUESTION 102
Which of the following is an example of drone "swarming"?
- A. A drone filming a cyclist from above as he rides.
- B. Drones communicating with each other to perform a search and rescue.
- C. Drones delivering retailers' packages to private homes.
- D. A drone flying over a building site to gather data.
Answer: B
NEW QUESTION 103
What is a mistake organizations make when establishing privacy settings during the development of applications?
- A. Providing a user with too much third-party information.
- B. Failing to get explicit consent from a user on the use of cookies.
- C. Failing to use "Do Not Track" technology
- D. Providing a user with too many choices.
Answer: D
NEW QUESTION 104
......
Ultimate Guide to Prepare CIPT Certification Exam for Information Privacy Technologist: https://www.passtorrent.com/CIPT-latest-torrent.html
CIPT Ultimate Study Guide: https://drive.google.com/open?id=1AKCHM_EEY9rK4dEK3vbFX9gVSHOj39d2