IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 321:

  Which of the following is the BEST option for a security director to use in order to mitigate the risk of inappropriate use of credentials by individuals with administrative rights?

  A. Have administrators sign appropriate access agreements.
  B. Define the Acceptable Use Policy (AUP) for administrators.
  C. Have administrators accept a Non-Disclosure Agreement.
  D. Perform extensive background checks on administrators.
  A. Have administrators sign appropriate access agreements.

  ---

  Explanation

• Question 322:

  Which of the following statements is true about the meantime between failures (MTBF) measure?

  A. It is used for non-repairable products.
  B. An increase in MTBF is proportional to anincrease inquality.
  C. It is a useful measure of reliability.
  D. It is the same as operating life or service life.
  C. It is a useful measure of reliability.

  ---

  Explanation

  Mean Time Between Failures (MTBF) is a key metric used to assess the reliability of repairable systems or components. It indicates the average time between one failure and the next, helping organizations predict system uptime and

  maintenance needs.

  A is incorrect: MTBF applies to repairable products; non-repairable items use Mean Time To Failure (MTTF).

  B is misleading: While higher MTBF often correlates with better reliability, it is not strictly proportional to quality.

  D is incorrect: MTBF is not the same as total operating or service life.

• Question 323:

  Which of the following incorporates design techniques promoted by Crime Prevention Through Environmental Design (CPTED)?

  A. Capacity of residents to act individually should be increased.
  B. Landscape design features should be used to create the impression of a fortress.
  C. Multiple entrances and exits should be used to keep traffic flowing smoothly through the facility.
  D. Communal areas with amenities should be created to encourage activity and use.
  D. Communal areas with amenities should be created to encourage activity and use.

  ---

  Explanation

• Question 324:

  Which of the following is PRIMARILY responsible for deciding the classification of data in an organization?

  A. Data owner/steward
  B. Authorizing Official (AO)
  C. Chief Information Security Officer (CISO)
  D. Data custodian
  A. Data owner/steward

  ---

  Explanation

• Question 325:

  Which Virtual Private Network (VPN) protocol provides a built-in encryption?

  A. Layer 2 Tunneling Protocol
  B. Point-to-Point Tunneling Protocol
  C. Layer 2 Forwarding Protocol
  D. Internet Protocol Security (IPsec)
  D. Internet Protocol Security (IPsec)

  ---

  Explanation

• Question 326:

  Which of the following items does the master scheduler have the authority to change in the master scheduling process?

  A. Product mix
  B. Aggregate volume
  C. Engineering change effectivity date
  D. Customer order quantities
  A. Product mix

  ---

  Explanation

  The master scheduler is responsible for balancing supply and demand at the detailed product level, which includes managing the product mix - i.e., deciding which specific items or models to produce within the constraints of the aggregate production plan. The other items typically fall under different authorities: Aggregate volume - handled at the sales and operations planning (SandOP) level Engineering change effectivity date - managed by engineering Customer order quantities - determined by customer demand/sales

• Question 327:

  Which of the following BEST characterizes the operational benefit of using immutable workloads when working on a cloud-based project?

  A. The clouds service provider is responsible for all security within the workload
  B. Security testing is managed after image creation
  C. No longer have to bring system down to patch
  D. Allows a user to enable remote logins to running workloads
  C. No longer have to bring system down to patch

  ---

  Explanation

• Question 328:

  The number of time an item is counted in a year is called its count frequency.

  A. True
  B. False
  A. True

  ---

  Explanation

• Question 329:

  As a result of a fault at a cloud service provider's data center, the customer accounts of a utility organization were corrupteD: Under the European Union's (EU) General Data Protection Regulation (GDPR), which entity bears responsibility for resolving this?

  A. Data steward
  B. Data processor
  C. Data controller
  D. Data custodian
  C. Data controller

  ---

  Explanation

• Question 330:

  An organization is considering options to outsource their Information Technology (IT) operations. Although they do not sell anything on the Internet, they have a strong requirement in uptime of their application. After the offerings received by the Cloud Service Provider (CSP), the IT manager decided it was mandatory to develop processes to continue operations without access to community or public cloud-based applications. Which of the following arguments MOST likely led the IT manager to make this decision?

  A. Circumstances may force a cloud provider to discontinue operations.
  B. The need to develop alternative hosting strategies for applications deployed to the cloud.
  C. Most cloud services offerings are unique to each provider and may not be easily portable.
  D. Integrity and confidentiality are not ensured properly on the most cloud service offerings.
  A. Circumstances may force a cloud provider to discontinue operations.

  ---

  Explanation