IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 341:

  Employees at an organization use web based services provided by an affiliate. Which of the following risks is unique to this situation?

  A. Watering hole attack
  B. Man-In-Middle (MITM) attack
  C. Cross-Site Request Forgery (CSRF) attack
  D. PowerShell attack
  A. Watering hole attack

  ---

  Explanation

• Question 342:

  In a hospital, during a routine inspection performed by the computerized tomography device technical service, it is discovered that the values of radiation used in scans are one order of magnitude higher than the default setting. If the system has had an unauthorized access, which one of the following concepts BEST describes which core principle has been compromised?

  A. Confidentiality
  B. Availability
  C. Cybersecurity
  D. Integrity
  D. Integrity

  ---

  Explanation

• Question 343:

  An agency has the requirement to establish a direct data connection with another organization for the purpose of exchanging data between the agency and organization systems. There is a requirement for a formal agreement between the agency and organization. Which source of standards can the system owners use to define the roles and responsibilities along with details for the technical and security requirements?

  A. International Organization For Standardization (ISO)
  B. European Committee for Electrotechnical Standardization
  C. Caribbean Community Regional Organization for Standards and Quality
  D. Institute of Electrical and Electronics Engineers (IEEE)
  A. International Organization For Standardization (ISO)

  ---

  Explanation

• Question 344:

  A logistics manager is faced with delivering an order via rail or truck. Shipping via rail costs $300 and takes 14 days. Shipping via truck costs $600 and takes 3 days. If the holding cost is $40 per day, what is the cost to deliver the order?

  A. $340 for rail, $600 for truck
  B. $340 for rail, $720 for truck
  C. $860 for rail, $720 for truck
  D. $860 for rail, $600 for truck
  C. $860 for rail, $720 for truck

  ---

  Explanation

  The cost to deliver the order consists of two components: the shipping cost and the holding cost. The shipping cost is the amount paid to the transportation mode for moving the order from the origin to the destination. The holding cost is the amount incurred for storing the order until it is delivered to the customer. The holding cost depends on the delivery time, which is the number of days it takes for the order to reach the customer. The longer the delivery time, the higher the holding cost. The shipping cost and the holding cost for each transportation mode are calculated as follows:

  Shipping via rail: Shipping cost = $300 Delivery time = 14 days Holding cost = $40 x 14 = $560 Total cost = $300 + $560 = $860 Shipping via truck: Shipping cost = $600 Delivery time = 3 days Holding cost = $40 x 3 = $120 Total cost = $600 + $120 = $720

  Therefore, the cost to deliver the order via rail is $860, and the cost to deliver the order via truck is $720.

• Question 345:

  In Company XYZ, transaction-costing capability has been Integrated into the shop floor reporting system. A batch of 20 units was started in production. At the fourth operation, 20 units are reported as complete. At the fifth operation, 25 units are reported as complete. When all operations are complete, 20 units are checked into the stockroom. If the error at the fifth operation is undetected, which of the following conditions will be true?

  A. Stockroom inventory balance will be incorrect.
  B. Operator efficiency for the fifth operation will be overstated.
  C. Units in process will be understated.
  D. Work-in-process (WIP) cost will be understated.
  B. Operator efficiency for the fifth operation will be overstated.

  ---

  Explanation

  If 25 units are incorrectly reported as completed at the fifth operation when only 20 units actually exist, it will falsely inflate the reported output for that step. This leads to an overstatement of operator efficiency, as the system assumes more work was completed than actually occurred.

• Question 346:

  The formula to calculate the period-order quantity is:

  A. Period-order quantity = EOQ / average yearly usage
  B. Period-order quantity = EOQ / average monthly usage
  C. Period-order quantity = EOQ * average monthly usage
  D. Period-order quantity = EOQ / average weekly usage Where EOQ is Economic-Order- Quantity
  D. Period-order quantity = EOQ / average weekly usage Where EOQ is Economic-Order- Quantity

  ---

  Explanation

  

• Question 347:

  Which of the following factors is the MOST important consideration for a security team when determining whether cryptographic erasure can be used for disposal of a device?

  A. If the data on the device exceeds what cryptographic erasure can safely process
  B. If the methods meet the International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001
  C. If security policies allow for cryptographic erasure based on the data stored on the device
  D. If the device was encrypted prior using cipher block chaining
  C. If security policies allow for cryptographic erasure based on the data stored on the device

  ---

  Explanation

• Question 348:

  A company is having trouble with raw material deliveries and has decided to develop a supplier certification program. The certification process most appropriately would start with which of the following suppliers?

  A. Suppliers of "A" classified items
  B. Suppliers recently ISO 9000 certified
  C. Suppliers with the worst performance records
  D. Suppliers with vendor-managed inventory (VMI)
  A. Suppliers of "A" classified items

  ---

  Explanation

  A supplier certification program is a formal process of evaluating and approving potential suppliers based on certain criteria, such as quality, delivery, cost, and service. The purpose of a supplier certification program is to ensure that the suppliers meet the standards and expectations of the company and to reduce the risks and costs associated with poor supplier performance. A supplier certification program should start with the have the highest impact on the company's profitability and customer satisfaction, and therefore require the highest level of supplier reliability and quality. By certifying the suppliers of "A" classified items, the company can improve its supply chain performance and reduce its dependence on inspection and corrective actions. This aligns with CPIM's focus on plan and manage supply and plan and manage distribution.

• Question 349:

  What FIRST step should a newly appointed Data Protection Officer (DPO) take to develop an organization's regulatory compliance policy?

  A. Draft an organizational policy on retention for approval.
  B. Ensure that periodic data governance compliance meetings occur.
  C. Understand applicable laws, regulations, and policies with regard to the data.
  D. Determine the classification of each data type.
  C. Understand applicable laws, regulations, and policies with regard to the data.

  ---

  Explanation

• Question 350:

  A security practitioner has been asked to investigate the presence of customer Personally Identifiable Information (PII) on a social media website. Where does the practitioner begin?

  A. Review logs of all user's social media activity.
  B. Review the organizational social media policy.
  C. Initiate the organization's incident response plan.
  D. Determine a list of information assets that contain PII.
  B. Review the organizational social media policy.

  ---

  Explanation