IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 261:

  Which of the following planning modules considers the shortest-range planning goals?

  A. Capacity requirementsplanning(CRP)
  B. Input/output analysis
  C. Resource planning
  D. Rough-cut capacity planning (RCCP)
  A. Capacity requirementsplanning(CRP)

  ---

  Explanation

  Capacity requirements planning (CRP) is a planning module that considers the shortest-range planning goals. CRP is a process of determining the amount of available capacity and comparing it with the required capacity to execute the

  planned orders in the master production schedule (MPS) and the material requirements planning (MRP). CRP is usually done at the work center level and for a time horizon of a few weeks or months. CRP helps to identify and resolve

  capacity issues, such as overloads or underloads, and to adjust the production plan accordingly. CRP is the most detailed and accurate method of capacity planning, as it considers the actual routings, lead times, and lot sizes of the orders.

  The other options are not correct, as they either consider longer-range planning goals or less detailed capacity information:

  Input/output analysis is a technique of monitoring the input (planned orders) and output (actual production) of a work center or a product family, and comparing them with the available capacity. Input/output analysis is usually done at the

  aggregate level and for a time horizon of a few months or quarters. Input/output analysis helps to measure the performance of the production plan and to identify and correct deviations from the plan.

  Resource planning is a process of determining the long-range capacity requirements for labor, equipment, facilities, and other resources, based on the sales and operations plan (SandOP). Resource planning is usually

  done at the aggregate level and for a time horizon of a few years. Resource planning helps to support the strategic decisions and investments related to the resource capacity.

  Rough-cut capacity planning (RCCP) is a process of verifying the feasibility of the master production schedule (MPS) in terms of the available capacity of critical resources, such as key machines or labor skills. RCCP is usually done at the

  product family level and for a time horizon of a few months or quarters. RCCP helps to validate the MPS and to identify and resolve potential capacity bottlenecks or gaps.

  References:

  CPIM Part 2 - Section A - Topic 2 - Capacity Planning]

  Capacity Requirements Planning (CRP)

  Input/Output Control

  Resource Planning

  Rough Cut Capacity Planning (RCCP)

• Question 262:

  The Business Continuity Plan (BCP) has multiple components. The information security plan portion must prioritize its efforts. Which 3 aspects of information security MUST be prioritized?

  A. Confidentiality, integrity, availability
  B. Physical security, access control, asset protection
  C. Intent, capability, opportunity
  D. Threat level, network security, information disposal
  A. Confidentiality, integrity, availability

  ---

  Explanation

• Question 263:

  An Information Technology (IT) professional is seeking a control objective framework that is widely accepted around the world and focuses specifically on information security controls. Which of the following frameworks BEST meets this need?

  A. International Organization For Standardization (ISO) 27001
  B. International Organization For standardization (ISO) 27002
  C. International Technology Infrastructure Library (ITIL)
  D. Capability Maturity Model (CMM)
  A. International Organization For Standardization (ISO) 27001

  ---

  Explanation

• Question 264:

  Which of the following statements is true about total productive maintenance (TPM)?

  A. It uses statistical tools.
  B. It is part of the business strategy.
  C. It influences the product design process.
  D. It minimizes unscheduled breakdowns.
  D. It minimizes unscheduled breakdowns.

  ---

  Explanation

  Total productive maintenance (TPM) is a holistic approach to equipment maintenance that strives to achieve perfect production: no breakdowns, no small stops or slow running, no defects, and no accidents. TPM emphasizes proactive and preventative maintenance to maximize the operational efficiency of equipment. It blurs the distinction between the roles of production and maintenance by placing a strong emphasis on empowering operators to help maintain their equipment. The implementation of a TPM program creates a shared responsibility for equipment that encourages greater involvement by plant floor workers. In the right environment, this can be very effective in improving productivity and quality. One of the eight pillars of TPM is planned maintenance, which aims to reduce the frequency of breakdowns and minimize the impact of failures on production. Planned maintenance involves scheduling maintenance activities based on the actual condition of the equipment, rather than on a fixed time interval. This reduces the risk of over-maintenance or under-maintenance, and optimizes the use of resources. Planned maintenance also involves improving the maintainability and reliability of the equipment, by identifying and eliminating the root causes of failures, and implementing design changes or modifications

• Question 265:

  What order BEST reflects the steps when adding threat modeling practices to a Software Development Life Cycle (SDLC)?

  A. Inventory use cases, categorize threats, evaluate business impact Understand attack front, identify trust levels, decompose application
  C. Inventory countermeasures, identify threats, implement mitigations
  D. Establish monitoring, identify risks, implement countermeasures
  B

  ---

  Explanation

• Question 266:

  Which of the following is NOT the possible root cause in generating some ideas about the main causes of the problem?

  A. Processes
  B. Materials
  C. Machines
  D. Environment
  A. Processes

  ---

  Explanation

  In traditional root cause analysis frameworks like the 5M + E (Man, Machine, Method, Material, Measurement, Environment), the typical categories are: Man (People) Machine Material Method Measurement Environment While "Method" is the standard term, "Processes" is not typically listed as one of the standard categories - it may be viewed as overlapping with "Method," but it's not explicitly part of the 5M+E.

• Question 267:

  What is based on a comparative analysis of the introduction and growth of similar products in the hope that the new product behaves in a similar fashion?

  A. Forecasting analogy
  B. Estimated analogy
  C. Future analogy
  D. Historical analogy
  A. Forecasting analogy

  ---

  Explanation

  Forecasting analogy involves using the introduction and growth patterns of similar past products to predict demand for a new product, under the assumption that it will behave in a similar way. It's especially useful when historical data for the new product is limited.

• Question 268:

  An organization uses an external Identity Provider (IdP) to secure internal, external, or third-party applications. Which of the following is the GREATEST risk to the organization?

  A. Unavailability of access logs
  B. Integrity of authentication mechanism
  C. Compromise of service
  D. Deletion of federated tokens
  C. Compromise of service

  ---

  Explanation

• Question 269:

  Which of eth following is NOT the source of waste in the design of the manufacturing system?

  A. Process
  B. Methods
  C. Environment
  D. Movement
  C. Environment

  ---

  Explanation

  In lean manufacturing and waste identification (e.g., the 7 Wastes - TIMWOOD), the typical sources of waste include: Transportation Inventory Motion (Movement) Waiting Overproduction Overprocessing Defects Additional concepts also consider methods and processes as potential areas for waste if inefficient. However, "Environment" is not typically categorized as a direct source of waste in the design of manufacturing systems - it may influence conditions but is not a primary source of waste in standard lean frameworks.

• Question 270:

  Cloud computing introduces the concept of the shared responsibility model. This model can MOST accurately be described as defining shared responsibility between which of the following?

  A. Hosts and guest environments
  B. Operating Systems (OS) and applications
  C. Networks and virtual environments
  D. Customers and providers
  D. Customers and providers

  ---

  Explanation