IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 521:

  Which of the following BEST describes how an Application Programming Interface (API) gateway fits into an application architecture?

  A. An API gateway is a specialized reverse proxy that can make different APIs appear as if they are a single API.
  B. An API gateway inspects traffic and blocks many common attacks against Hypertext Transfer Protocol (HTTP) web services.
  C. An API gateway ensures that a Denial-Of-Service (DoS) attack cannot occur within the application.
  D. An API gateway monitors traffic within internal networks and ensures suspicious patterns are detected on any API.
  A. An API gateway is a specialized reverse proxy that can make different APIs appear as if they are a single API.

  ---

  Explanation

• Question 522:

  A low-cost provider strategy works best when which of the following conditions are met?

  A. Price competition among rivals is similar.
  B. Buyers are more price sensitive.
  C. There are many ways to achieve product differentiation.
  D. There are few industry newcomers.
  B. Buyers are more price sensitive.

  ---

  Explanation

  A low-cost provider strategy is most effective when customers are highly sensitive to price, as it allows the company to attract more buyers by offering lower prices than competitors.

• Question 523:

  Once an organization has identified and properly classified their information and data assets, policies and procedures are created to establish requirements for the handling, protection, retention, and disposal of those assets. Which solution is the BEST method to enforce data usage policies, discover sensitive data, monitor the use of sensitive data, and ensure regulatory compliance and intellectual property protection?

  A. Application whitelisting
  B. Data governance
  C. Data loss prevention (DLP)
  D. Intrusion detection and prevention system (IDPS)
  C. Data loss prevention (DLP)

  ---

  Explanation

• Question 524:

  What can affect the trend, seasonality, or randomness of the actual demand?

  A. Static changes
  B. Dynamic changes
  C. Random changes
  D. Planned changes
  B. Dynamic changes

  ---

  Explanation

  Dynamic changes refer to evolving market conditions, customer preferences, economic shifts, or competitor actions that can impact the trend, seasonality, or randomness of actual demanD: These changes make forecasting more complex and require ongoing adjustment.

• Question 525:

  An information system containing Protected Health Information (PHI) will be accessed by doctors, nurses, and others working in a hospital. The same application will be used by staff in the pharmacy department only for dispensing prescribed medication. Additionally, patients can log in to view medical history. The system owner needs to propose an access control model that considers environment, situation, compliance, and security policies while dynamically granting the required level of access. Which access control model is the MOST suitable?

  A. Role-Based Access Control (RBAC)
  B. Attribute-Based Access Control (ABAC)
  C. Task-based access control
  D. Risk-adaptive access control
  B. Attribute-Based Access Control (ABAC)

  ---

  Explanation

• Question 526:

  What is the PRIMARY benefit an organization obtains by adapting a cybersecurity framework to their cybersecurity program?

  A. A structured risk management process
  B. A common set of security capabilities
  C. A structured cybersecurity program
  D. A common language and methodology
  D. A common language and methodology

  ---

  Explanation

• Question 527:

  The development team wants new commercial software to integrate into the current system. What steps can the security office take to ensure the software has no vulnerabilities?

  A. Ask the development team to reevaluate the current program and have a toolset developed securely within the organization.
  B. Request a copy of the most recent System and Organization Controls (SOC) report and/or most recent security audit reports and any vulnerability scans of the software code from the vendor.
  C. Purchase the software, deploy it in a test environment, and perform Dynamic Application Security Testing (DAST) on the software.
  D. Request a software demo with permission to have a third-party penetration test completed on it.
  B. Request a copy of the most recent System and Organization Controls (SOC) report and/or most recent security audit reports and any vulnerability scans of the software code from the vendor.

  ---

  Explanation

• Question 528:

  An advantage of applying ABC classification to a firm's replenishment items is that:

  A. it distinguishes independent demand from dependent demand.
  B. it allows planners to focus on critical products.
  C. it provides better order quantities than the economic order quantity (EOQ).
  D. it allows the firm to utilize time-phased order point (TPOP).
  B. it allows planners to focus on critical products.

  ---

  Explanation

  ABC classification ranks inventory items by importance (typically based on value or usage), enabling planners to prioritize attention and resources on the most critical (A-class) items, improving control and decision-making efficiency.

• Question 529:

  What is an important countermeasure to consider when hardening network devices and servers to reduce the effectiveness of unauthorized network scanning?

  A. Filter inbound logging and auditing configuration of all network devices.
  B. Filter inbound Internet Control Message Protocol (ICMP) messages at the network edge.
  C. Filter outbound logging and auditing configuration of all network devices.
  D. Filter outbound Internet Control Message Protocol (ICMP) messages at the network edge.
  B. Filter inbound Internet Control Message Protocol (ICMP) messages at the network edge.

  ---

  Explanation

• Question 530:

  The trade-off of increasing safety stock to improve customer fill rate would be a decrease in:

  A. pipeline inventory.
  B. transportation costs.
  C. inventory turns.
  D. sales revenue.
  C. inventory turns.

  ---

  Explanation

  Increasing safety stock raises the average inventory level, which in turn lowers inventory turnover (inventory turns), as the same sales are now supported by a larger inventory base. This is a key trade-off when aiming to improve customer fill rate.