IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 221:

  An organization is implementing improvements to secure the Software Development Life Cycle (SDLC). When should defensive three modeling occur?

  A. Standards review
  B. Static Application Security Testing (SAST)
  C. Design and requirements gathering
  D. Dynamic Application Security Testing (DAST)
  C. Design and requirements gathering

  ---

  Explanation

• Question 222:

  In which of the following circumstances is an organization MOST likely to report the accidental release of personal data to the European Union (EU) General Data Protection Regulation (GDPR) supervisory authority and affected users?

  A. The release of personal data was made to a highly trusted third-party vendor and there was confirmation that the data was not accessed before it was returned.
  B. The personal data was stored in a highly encrypted format and there is confirmation that the encryption keys were not accessed or released.
  C. All the personal data from the accidental release was from individuals who are not living in the EU.
  D. The personal data released only contained the ages and names of children who may or may not be living in the EU.
  D. The personal data released only contained the ages and names of children who may or may not be living in the EU.

  ---

  Explanation

• Question 223:

  An infrastructure team is setting up a wireless network for employees at a new location of the organization that is located near a very busy city transport huB: Which should be the MOST important antenna consideration with regard to securing the wireless network for the infrastructure team?

  A. Network's Service Set Identifier (SSID) visibility and vulnerabilities are not cast out too far.
  B. Parabolic antenna is used for signal convergence.
  C. Network efficiently allows maximum channel separation.
  D. Implement Wired Equivalent Privacy (WEP) encryption.
  A. Network's Service Set Identifier (SSID) visibility and vulnerabilities are not cast out too far.

  ---

  Explanation

• Question 224:

  The Economic-order quantity will increase as the annual demand and the cost of ordering decrease, and it will decrease as the cost of carrying inventory and the unit cost increase.

  A. True
  B. False
  B. False

  ---

  Explanation

• Question 225:

  In order for an organization to mature their data governance processes to ensure compliance, they have created a data classification matrix.

  What are the next BEST activities to build on this completed work?

  A. Ensure the data owners agree with the classification of their data and then socialize the matrix with employees handling data.
  B. Ensure the internal legal team approves the data classification matrix then perform a Business Impact Analysis (BIA) to understand the impact of applying the classifications.
  C. Complete a Privacy Impact Assessment (PIA) and use the results to identify improvements to the data classification matrix.
  D. Document the handling procedures for each classification of data in the matrix and schedule data handling educational sessions with employees.
  A. Ensure the data owners agree with the classification of their data and then socialize the matrix with employees handling data.

  ---

  Explanation

• Question 226:

  Which security concept applies if an architecture diagram illustrates a particular user/role combination with access to an asset or applicaton?

  A. Non-repudiation
  B. Identification
  C. Authorization
  D. Authentication
  C. Authorization

  ---

  Explanation

• Question 227:

  The Chief Information Security Officer (CISO) defined a requirement to install a network security solution that will have the ability to inspect and block data flowing over network in real time. What network deployment scenario will be MOST suitable?

  A. Deploy the solution to a network terminal access point port.
  B. Deploy the solution and connect it to a Switched Port Analyzer (SPAN) port.
  C. Deploy the solution in line with the traffic flows.
  D. Deploy the solution on a separate Virtual Local Area Network (VLAN).
  C. Deploy the solution in line with the traffic flows.

  ---

  Explanation

• Question 228:

  A customer of a financial Institution denies that a transaction occurreD: Which of the following is used to provide evidence evidence that the customer performed the transaction?

  A. Authorization controls
  B. Two-Factor Authentication (2FA)
  C. Non-repudiation controls
  D. Access audit
  C. Non-repudiation controls

  ---

  Explanation

• Question 229:

  Which of the following BEST characterizes the operational benefit of using immutable workloads when working on a cloud-based project?

  A. The cloud service provider is responsible for all security within the workload
  B. Allows a user to enable remote logins to running workloads
  C. Security testing is managed after image creation
  D. No longer have to bring system down to patch
  D. No longer have to bring system down to patch

  ---

  Explanation

• Question 230:

  An employee returns a borrowed laptop used for lab testing. What is the BEST action the technician should perform upon receiving the laptop to ensure no sensitive information will be exposed?

  A. Delete all the files.
  B. Purge the hard drive.
  C. Encrypt the hard drive.
  D. Degauss the hard drive.
  B. Purge the hard drive.

  ---

  Explanation