IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 241:

  Fishbone diagrams would help a service organization determine:

  A. the proper level of service for a customer segment.
  B. the source of a quality-of-service issue.
  C. differences in the performance of employees.
  D. the decomposition of customer return rates with seasonality.
  B. the source of a quality-of-service issue.

  ---

  Explanation

  Fishbone diagrams (also known as Ishikawa or cause-and-effect diagrams) are tools used to systematically identify and analyze root causes of a problem - in this case, a quality-of-service issue. They help teams visualize the various potential causes leading to a specific effect or problem.

• Question 242:

  Which of the following vulnerability types is also known as a serialization flaw and affects the integrity of two processes interacting with the same resource at the same time?

  A. Boundary condition
  B. Buffer overflow
  C. Race condition
  D. Integer overflow
  C. Race condition

  ---

  Explanation

• Question 243:

  The most relevant measure of customer service performance is:

  A. service perceived by the customer against service expected by the customer.
  B. service promised to the customer against service measured by the supplier.
  C. customer complaints received as a percentage of orders shipped.
  D. positive customer feedback as a percentage of customer feedback.
  A. service perceived by the customer against service expected by the customer.

  ---

  Explanation

  The most relevant measure of customer service performance is the gap between what the customer expects and what they perceive they receiveD: This directly reflects the customer's experience and satisfaction, which are the true indicators of service effectiveness.

• Question 244:

  An organization has decided to give decommissioned computers to a school in a developing country. The company data handling policy prohibits the storage of confidential and sensitive datA: What would be the BEST technique to use to avoid data remanence, and to minimize the operational burden for the inheriting school?

  A. Overwriting the hard disk drive of the computers
  B. Encrypting the hard disk drive of the computers
  C. Removing and physically destroying the hard disk drive of the computers
  D. Degaussing the hard disk drive of the computers
  A. Overwriting the hard disk drive of the computers

  ---

  Explanation

• Question 245:

  Which of the following factors Is considered a carrying cost?

  A. Setup
  B. Transportation
  C. Obsolescence
  D. Scrap rate
  C. Obsolescence

  ---

  Explanation

  Obsolescence is a type of carrying cost, which refers to the cost of holding inventory over time. Carrying costs include storage, insurance, depreciation, and the risk of items becoming obsolete or outdated, which ties up capital and increases financial risk.

• Question 246:

  Which of the following concepts MOST accurately refers to an organization's ability to fully understand the health of the data in its system at every stage of the lifecycle?

  A. Data observability
  B. Data portability
  C. Data discovery
  D. Data analytics
  A. Data observability

  ---

  Explanation

• Question 247:

  Which four primary plant types are defined, and they are used to specify the flow of materials through a production process?

  A. I-plant, A-plant, B-plant, G-Plant
  B. I-plant, A-plant, V-plant, T-Plant
  C. C-plant, K-plant, B-plant, S-Plant
  D. A-plant, D-plant, B-plant, F-Plant
  B. I-plant, A-plant, V-plant, T-Plant

  ---

  Explanation

  These four primary plant types describe the flow of materials through different types of production processes: I-Plant: Linear flow Simple process with materials moving in a straight line from input to output A-Plant: Many raw materials combined into fewer finished products Assembly-focused V-Plant: Few raw materials diverge into many finished products Common in processes like chemical or food production T-Plant: Standard subassemblies with customization late in the process Common in mass customization Final Answer: B: I-plant, A-plant, V-plant, T-Plant.

• Question 248:

  A department manager executes threat modeling at the beginning of a project and throughout its lifecycle. What type of threat modeling is being performed?

  A. Proactive threat modeling
  B. Reactive threat modeling
  C. Risk assessment
  D. Threat modeling assessment
  A. Proactive threat modeling

  ---

  Explanation

• Question 249:

  A financial organization is using an internally developed application. The internal software development team has to adhere to the coding standards of the Software Development Cycle (SDLC). For applications whose functionality is exposed through the public Internet, this requirement consists of testing the application for potential vulnerabilities before it is deployed into production. What is the BEST type of vulnerability test to perform?

  A. Web application unit test
  B. Online application development test
  C. Web application penetration test
  D. Online application assurance test
  C. Web application penetration test

  ---

  Explanation

• Question 250:

  From a technical perspective, Six Sigma is achieved when the process capability is equal to at least 1. A. True

  B. False

  Correct Answer. B
  B

  ---

  Explanation

  From a technical perspective, Six Sigma is achieved when the process capability index (Cpk) is approximately 2.0, not 1.0. A Cpk of 1.0 corresponds to a 3-sigma process, while Six Sigma aims for 3.4 defects per million opportunities (DPMO), which requires a much higher capability.