IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 561:

  In the design and development of a manufacturing process, process engineers would most likely be responsible for decisions relating to:

  A. lead times.
  B. production capacity.
  C. product reliability.
  D. routing sequences.
  D. routing sequences.

  ---

  Explanation

  In the design and development of a manufacturing process, process engineers are primarily responsible for determining how a product is made - including routing sequences, which define the specific steps, operations, and machines involved in the production process. This ensures an efficient and logical flow of materials through the factory.

  Lead times and production capacity are typically handled by operations or production planning.

  Product reliability is more aligned with product design and quality engineering.

• Question 562:

  Information regarding a major new customer is received from sales. The company's most appropriate initial response would be to adjust the:

  A. production volume.
  B. master production schedule (MPS).
  C. sales and operations plan.
  D. forecast.
  D. forecast.

  ---

  Explanation

  When new customer information is received from sales, the most appropriate initial response is to adjust the forecast. This ensures that future demand planning reflects the updated expectations, which can then flow into the sales and operations plan (SandOP) and eventually the master production schedule (MPS).

• Question 563:

  An organization is migrating its access controls to a certificate-based authentication system.

  What will need to be established to verify the identity of all users connecting to the network before rolling out the system?

  A. A biometric system needs to scan unique attributes of all users.
  B. A Certificate Authority (CA) needs to issue new passwords to all users.
  C. A Certificate Authority (CA) needs to issue the certificates to all users.
  D. A challenge response system needs to validate all user access.
  C. A Certificate Authority (CA) needs to issue the certificates to all users.

  ---

  Explanation

• Question 564:

  When implementing a data classification program, Which is MOST important for measuring businesss impact?

  A. Data classification program being rolled out in accordance with policies and procedures
  B. Measuring the size of the data set to understand scoping for compliance requirements
  C. The adverse effect of data leakage
  D. The early appointment of data custodians
  C. The adverse effect of data leakage

  ---

  Explanation

• Question 565:

  Which of the following should be done FIRST when implementing an Identity and Access Management (IAM) solution?

  A. List and evaluate IAM available products.
  B. Evaluate the existing Information Technology (IT) environment.
  C. Evaluate business needs.
  D. Engage the sponsor and identify key stakeholders.
  D. Engage the sponsor and identify key stakeholders.

  ---

  Explanation

• Question 566:

  Electric data interchange enables customers and suppliers to electromagnetically exchange transaction information.

  A. True
  B. False
  A. True

  ---

  Explanation

  Electronic Data Interchange (EDI) allows businesses - such as customers and suppliers - to electronically exchange standardized transaction information, such as: Purchase orders Invoices Shipping notices This is done electronically and automatically, improving speed, accuracy, and efficiency in supply chain communication.

• Question 567:

  Under which of the following conditions is excess capacity most likely a good substitute for safety stock?

  A. The cost of excess capacity is less than the cost of an additional unit of safety stock in the same period.
  B. The cost to maintain one unit in inventory for a year is less than the direct labor cost.
  C. The service level with safety stock is more than the service level with excess capacity.
  D. Lead time for the product is longer than customers are willing to wait.
  A. The cost of excess capacity is less than the cost of an additional unit of safety stock in the same period.

  ---

  Explanation

  When excess capacity (e.g., ability to produce more on short notice) is cheaper than holding additional inventory, it becomes a cost-effective substitute for safety stock - especially in environments with variable demand and quick response capability.

• Question 568:

  An organization is running a cloud-based application to process the information obtained at point-of-sale devices. Which guideline should be applied to the application?

  A. Health Insurance Portability And Accountability Act (HIPAA)
  B. Application Security Verification Standard (ASVS)
  C. Payment Card Industry Data Security Standard (PCI DSS)
  D. Gramm-Leach-Bliley Act (GLBA)
  C. Payment Card Industry Data Security Standard (PCI DSS)

  ---

  Explanation

• Question 569:

  A financial organization is using an internally developed application.The internal software development team has to adhere to the coding standards of the Software Development Cycle (SDLC).For applications whose functionality is exposed through the public Internet, this requirement consists of testing the application for potential vulnerabilities before it is deployed into production. What is the BEST type of vulnerability test to perform?

  A. Online application assurance test
  B. Web application unit test
  C. Online application development test
  D. Web application penetration test
  D. Web application penetration test

  ---

  Explanation

• Question 570:

  Which of the following is a methodology for threat modeling in application?

  A. Disaster, Reproducibility, Exploitability, Affected Users, And Discoverability (DREAD)
  B. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege (STRIDE)
  C. Pretend, Allow, Crash, Modify, Ascertain, Name
  D. Confidentiality, Authentication, Integrity, Nonrepudiation, Availability
  B. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege (STRIDE)

  ---

  Explanation