IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 41:

  A champion is assigned to lead a threat modeling exercise. Which of the following will be the FIRST thing to consider?

  A. Using an automated tool to construct system models
  B. Outlining a detailed threat modeling procedure
  C. Scheduling weekly threat modeling sessions
  D. Ensuring the right stakeholder are involved
  D. Ensuring the right stakeholder are involved

  ---

  Explanation

• Question 42:

  Every operation producing a product or service is a series of linked processes and each process has a specific capacity to produce the given defined output for the operation, this is called:

  A. Theory of constraints
  B. Managing constraints
  C. Drum-Buffer-Rope
  D. Scheduling Bottlenecks
  A. Theory of constraints

  ---

  Explanation

  The Theory of Constraints (TOC) is a management philosophy that states:

  Every operation is made up of linked processes, and

  Each process has a specific capacity, with at least one being a constraint (or bottleneck) that limits the overall system output.

  Improving performance requires identifying and managing these constraints.

  Option Review:

  B: Managing constraints: A general action, not the formal name of the theory.

  C: Drum-Buffer-Rope: A scheduling technique used within TOC, but not the overall concept.

  D: Scheduling Bottlenecks: A tactical action, not the foundational theory. Final Answer: A: Theory of Constraints.

• Question 43:

  A healthcare organization's new cloud-based customer-facing application is constantly receiving security events from dubious sources. What BEST describes a security event that compromises the confidentiality, integrity, or availability of the application and data?

  A. Attack
  B. Breach
  C. Failure
  D. Incident
  D. Incident

  ---

  Explanation

• Question 44:

  A large organization that processes protected data issues preconfigured laptops to workers who then access systems and data based on their role. As their technology ages, these laptops are replaced with newer devices. What is the BEST solution to mitigate risk associated with these devices?

  A. Establish a device recycle process.
  B. Establish a process preventing credential storage on devices.
  C. Establish a physical destruction process for the storage medium.
  D. Establish a process for check in and check out of devices.
  C. Establish a physical destruction process for the storage medium.

  ---

  Explanation

• Question 45:

  Objective security metrics tend to be easier to gather, easier to interpret, and easier to include in reports to management.

  What is the BEST objective metric for the effectiveness of a security awareness training?

  A. The management's attitude toward the training
  B. The number of times users comply with the training
  C. A change of helpdesk calls after the training
  D. The off-hand comments about the training
  C. A change of helpdesk calls after the training

  ---

  Explanation

• Question 46:

  The primary reason for tracing a component with scheduling problems to Its master production schedule (MPS) item is to:

  A. revise the rough-cut capacity plan.
  B. reschedule a related component on the shop floor.
  C. check the accuracy of the bills for the MPS items.
  D. determine if a customer order will be impacted.
  D. determine if a customer order will be impacted.

  ---

  Explanation

  Tracing a problematic component back to its MPS item helps identify whether any customer orders tied to that item might be delayed or affected, allowing planners to take corrective action proactively.

• Question 47:

  An index of the relative priority of an order to other orders at a work center is referred to as:

  A. Aspect ratio
  B. Critical ratio
  C. Priority ratio
  D. Schedule ratio
  B. Critical ratio

  ---

  Explanation

  

• Question 48:

  An order winner during the growth stage of a product's life cycle is:

  A. variety.
  B. availability.
  C. dependability.
  D. price.
  B. availability.

  ---

  Explanation

  During the growth stage of a product's life cycle, demand increases rapidly, and the key order winner is often availability - ensuring the product is in stock and can be delivered promptly to capture market share.

• Question 49:

  Which of the following presents the GREATEST benefit to an organization's security posture when a change management process is implemented?

  A. Accuracy of Key Risk Indicators (KRI) reported to senior management
  B. Ensure the integrity of the organization's assets
  C. Backups being completed in a timely manner
  D. Accuracy of Key Performance Indicators (KPI) reported to senior management
  B. Ensure the integrity of the organization's assets

  ---

  Explanation

• Question 50:

  Which of the following tools is used to evaluate the impact that a production plan has on capacity?

  A. Demand time fence (DTF)
  B. Bill of resources
  C. Product routing
  D. Safety capacity
  B. Bill of resources

  ---

  Explanation

  A bill of resources is a tool that lists the capacity requirements for each work center or resource group based on the planned production quantities. It is used to evaluate the impact that a production plan has on capacity by comparing the available capacity with the required capacity. A bill of resources can also help identify capacity bottlenecks, excess capacity, and alternative resources. A demand time fence(DTF) is a tool that defines the period of time in which the master production schedule (MPS) is frozen and cannot be changed by customer orders. A product routing is a tool that defines the sequence of operations and work centers required to produce a product. A safety capacity is a tool that provides a buffer against demand and supply uncertainty by adding extra capacity to the planned capacity. These tools are not directly used to evaluate the impact that a production plan has on capacity, although they may affect the capacity planning process.