IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 131:

  Network Access Control (NAC) is used to perform what function for computers joining the network?

  A. Ensure all networking components communicate with each other.
  B. Ensure that all approved devices can join the network.
  C. Restrict access to the network based on Media Access Control (MAC) address or Internet Protocol (IP) address.
  D. Restrict the time and date that computers are allowed to connect to the organization's network.
  B. Ensure that all approved devices can join the network.

  ---

  Explanation

• Question 132:

  When conducting a vulnerability test using a scanner tool, which unintended consequence can occur?

  A. Opening of previously closed ports
  B. Adding administrator rights on servers
  C. Performing a Cross-Site Scripting (XSS) attack
  D. Creating a Denial-Of-Service (DoS) condition
  D. Creating a Denial-Of-Service (DoS) condition

  ---

  Explanation

• Question 133:

  A cybersecurity analyst is responsible for identifying potential security threats and vulnerabilities in the organization's software systems. Which action BEST demonstrates the understanding and application of threat modeling concepts and methodologies?

  A. Implementing a Business Continuity Plan (BCP)
  B. Conducting access control assessments for the data center
  C. Analyzing potential attack vectors for a new software application
  D. Developing a Disaster Recovery Plan (DRP) for critical systems
  C. Analyzing potential attack vectors for a new software application

  ---

  Explanation

• Question 134:

  The help desk received a call from a user noting the digital certificate on the organization-issued security identification card was invaliD: Which is the BEST reason the certificate stopped working?

  A. The user's certificate was compromised by the public key of the user.
  B. The public key of the Certificate Authority (CA) is known to attackers.
  C. The user's certificate was absent from the Certificate Revocation List (CRL).
  D. The user's certificate has expired and needs to be renewed.
  D. The user's certificate has expired and needs to be renewed.

  ---

  Explanation

• Question 135:

  A contractor hacked into an unencrypted session on an organization's wireless network. Which authentication configuration is MOST likely to have enabled this?

  A. Remote Authentication Dial-In User Service (RADIUS)
  B. Captive web portal
  C. Lightweight Directory Access Protocol (LDAP)
  D. Token authentication
  B. Captive web portal

  ---

  Explanation

• Question 136:

  An organization suffered a loss to an asset at a frequency that was different than the initially estimated Annualized Rate of Occurrence (ARO). What is the appropriate course of action?

  A. Do nothing; the loss validates the ARO.
  B. DO nothing; the loss validates the exposure factor.
  C. Recalculate the value of the safeguard.
  D. Recalculate the cost of the countermeasure.
  D. Recalculate the cost of the countermeasure.

  ---

  Explanation

• Question 137:

  An organization has recently been hackeD: To prevent future breaches, the Chief Information Security Officer (CISO) hires a third-party vendor to perform penetration testing on the network. Once complete, the vendor provides to the CISO a final report generated by a high-quality vulnerability scanner. The CISO rejects the report as incomplete.

  Why is the vendor's penetration test considered incomplete?

  A. The vendor should have attempted to exploit the identified vulnerabilities.
  B. The vendor should also provide a guide to remediate the identified vulnerabilities.
  C. The vendor should have provided a risk report of vulnerabilities found.
  D. The vendor should have worked closely with network engineers to understand the network infrastructure better.
  A. The vendor should have attempted to exploit the identified vulnerabilities.

  ---

  Explanation

• Question 138:

  Asymmetric cryptography uses which type of key to encrypt data?

  A. Private key
  B. Permanent key
  C. Parent key
  D. Public key
  D. Public key

  ---

  Explanation

• Question 139:

  Which of the following is the GREATEST threat for a Border Gateway Protocol (BGP) deployment on the internet?

  A. Ability to use weak hashing algorithms for peer authentication
  B. Ability to perform unauthenticated peering across autonomous systems
  C. Failure to validate legitimacy of received route advertisements
  D. Failure to encrypt route announcement across autonomous systems
  C. Failure to validate legitimacy of received route advertisements

  ---

  Explanation

• Question 140:

  Which of the following should be done FIRST when implementing an Identity And Management (IAM) solution?

  A. List and evaluate IAM available products.
  B. Evaluate business needs.
  C. Engage the sponsor and identify Key stakeholders.
  D. Engage the existing Information Technology (IT) environment.
  B. Evaluate business needs.

  ---

  Explanation