IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 391:

  Which of the following combines multiple software programming tools into one package?

  A. Integrated development environments
  B. Software development kit
  C. Dynamic Link Libraries (DLL)
  D. Program language compilers
  A. Integrated development environments

  ---

  Explanation

• Question 392:

  Which of the following is a system architecture in a data protection strategy?

  A. Logical isolation
  B. Network segmentation
  C. Distributed network
  D. Access enforcement
  B. Network segmentation

  ---

  Explanation

• Question 393:

  Which of the following methods places a replenishment order when the quantity on hand falls below a predetermined level?

  A. Min-max system
  B. Fixed order quantity
  C. Periodic review
  D. Available-to-promlse (ATP)
  A. Min-max system

  ---

  Explanation

  The min-max system triggers a replenishment order when the inventory level falls below a predefined minimum (reorder point). The order typically brings the inventory back up to the maximum level, ensuring stock availability while controlling inventory levels.

• Question 394:

  An organization has decided to advance from qualitative risk assessment to quantitative risk analysis. The information security risk analyst has been tasked with replacing the organization's qualitative likelihood scale of low, medium, and high with a quantitative approach. Which is the BEST approach for replacing the qualitative input values?

  A. Estimate the probability of the scenario ever occurring and use that percentage.
  B. Replace the qualitative scale's thresholds with point percentages (e.g., low = 25%; medium = 50%; high = 75%) and use those percentages.
  C. Replace the qualitative scale's thresholds with ranges of percentages (e.g., low = 1?3%; medium = 34?66%; high = 67?9%) and use those percentages.
  D. Estimate the probability of the scenario occurring within the following year and use that percentage.
  C. Replace the qualitative scale's thresholds with ranges of percentages (e.g., low = 1?3%; medium = 34?66%; high = 67?9%) and use those percentages.

  ---

  Explanation

• Question 395:

  A part is sold as a service part, and It is also used as a component In another part. Which of the following statements about the planning for this part is true?

  A. Its low-level code is zero.
  B. The material requirements for the part will be understated.
  C. The service part demand can be included In the gross requirements.
  D. It shouldn't have any safety stock.
  C. The service part demand can be included In the gross requirements.

  ---

  Explanation

  When a part is used both as a service part and a component, all sources of demand - including service part demand - should be included in the gross requirements during material requirements planning (MRP).

• Question 396:

  A security analyst has been asked to build a data retention policy for a hospital. What is the FIRST action that needs to be performed in building this policy?

  A. Determine local requirements.
  B. Determine federal requirements.
  C. Ensure that all data has been classified.
  D. Designate a person of authority.
  C. Ensure that all data has been classified.

  ---

  Explanation

• Question 397:

  A health care organization's new cloud-based customer-facing application is constantly receiving security events from dubious sources. What BEST describes a security event that compromises the confidentiality, integrity or availability of the application and data?

  A. Failure
  B. Incident
  C. Attack
  D. Breach
  D. Breach

  ---

  Explanation

• Question 398:

  The message in which the planner must tell the MRP software of all actions taken that will influence the MRP records called

  A. Exception messages
  B. Transaction messages
  C. Bottom-up re-planning
  D. None of the above
  B. Transaction messages

  ---

  Explanation

  Transaction messages are used when a planner communicates updates or actions to the MRP system that affect inventory and planning records. These can include: Order releases Order completions Cancellations Quantity changes

  These transactions update the MRP records to reflect actual changes in the system.

  Option Review:

  A: Exception messages: Alerts generated by MRP to signal issues (e.g., late orders), not updates from the planner.

  C: Bottom-up re-planning: A method to adjust plans based on component-level changes, not message input.

  D: None of the above: Incorrect, as B is accurate.

• Question 399:

  A Software As A Service (SaaS) solution was compromised due to multiple missing security controls. The SaaS deployment was rushed and the Software Development Life Cycle (SDLC) was not followeD: Which SDLC phase would have been MOST effective in preventing this failure?

  A. Maintenance
  B. Design
  C. Testing
  D. Requirements
  D. Requirements

  ---

  Explanation

• Question 400:

  A web developer was recently asked to create an organization portal that allows users to retrieve contacts from a popular social media platform using Hypertext Transfer Protocol Secure (HTTPS). Which of the following is BEST suited for authorizing the resource owner to the social media platform?

  A. Open Authorization (OAuth) 2.0
  B. OpenID Connect (OIDC)
  C. Security Assertion Markup Language (SAML)
  D. Secure Lightweight Directory Access Protocol (LDAP)
  A. Open Authorization (OAuth) 2.0

  ---

  Explanation