IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 571:

  Which of the following factors is the MOST important consideration for a security team when determining when determining whether cryptographic erasure can be used for disposal of a device?

  A. If the methods meet the International organization For Standardization/International Electrotechnical Commission (ISO/IEC) 27001.
  B. If the data on the device exceeds what cryptographic erasure can safely process.
  C. If the device was encrypted prior using cipher block chaining.
  D. If the security policies allow for cryptographic erasure based on the data stored on the device.
  D. If the security policies allow for cryptographic erasure based on the data stored on the device.

  ---

  Explanation

• Question 572:

  Which of the following capacity planning methods uses the master production schedule (MPS) as its primary input?

  A. Resource planning
  B. Rough-cut capacity planning (RCCP)
  C. Finite loading
  D. Input/output analysis
  B. Rough-cut capacity planning (RCCP)

  ---

  Explanation

  Rough-cut capacity planning (RCCP) evaluates whether the capacity is sufficient to meet the master production schedule (MPS). It uses the MPS as its primary input and checks key resources (labor, machines, work centers) to ensure feasibility before detailed planning.

• Question 573:

  Which if the following is the FIRST control step in provisioning user rights and privileges?

  A. Identification
  B. Authorization
  C. Authentication
  D. Confidentiality
  A. Identification

  ---

  Explanation

• Question 574:

  What is done by individual worker who, instead of checking for defects, checks for errors that will cause defects?

  A. Successive check
  B. Self-check
  C. Source inspection
  D. Source correction
  C. Source inspection

  ---

  Explanation

  Source inspection is performed by the individual worker to identify errors at the source-before they result in defects. Rather than checking the final product, the focus is on preventing defects by detecting error conditions early in the process.

• Question 575:

  What is the MOST appropriate action to take when media classification needs to be downgraded to a less sensitive classification?

  A. Modify access permissions on media at appropriate classification level.
  B. Modify access logging on media at appropriate classification level.
  C. Sanitize media using appropriate data destruction procedure.
  D. Mark the media with less sensitive classification label.
  C. Sanitize media using appropriate data destruction procedure.

  ---

  Explanation

• Question 576:

  The question below is based on the following standard and actual data of a production order

  

  Which of the following statements about variances is true?

  A. The material price vanance for Component A is favorable by S10
  B. The labor pnce variance is unfavorable by S20
  C. The material usage variance for Component B is favorable by $36
  D. The labor efficiency variance is favorable by S20
  D. The labor efficiency variance is favorable by S20

  ---

  Explanation

  Let's calculate each variance to determine which statement is true. Standard Requirements for 100 Units Standard Costs Actuals Labor: 48 hrs, $480 Component A: 130 lbs, $65 Component B: 210 pcs, $336 Now calculate each variance: Favorable by $20 - D is correct

  

• Question 577:

  Which of the following threats MUST be included while conducting threat modeling for a Cloud Service Provider (CSP)?

  A. Risks of data breaches that can result from inadequate encryption of tenant data in transit and at rest
  B. Potential legal actions from third parties due to tenants' activities on the CSP's platform
  C. Vulnerabilities in shared resources that can be exploited by attackers to affect multiple tenants
  D. Threats originating from the CSP's tenants that can impact the infrastructure and other tenants
  C. Vulnerabilities in shared resources that can be exploited by attackers to affect multiple tenants

  ---

  Explanation

• Question 578:

  Which of the following Internet Protocol Security (IPSec) components provides the MOST confidentiality for the information that is being transmitted?

  A. Authentication Header (AH)
  B. Generic Routing Encapsulation (GRE)
  C. Encapsulation Security Payload
  D. Internet Key Exchange (IKE)
  C. Encapsulation Security Payload

  ---

  Explanation

• Question 579:

  A disadvantage of a capacity-lagging strategy may be:

  A. lack of capacity to fully meet demand.
  B. risk of excess capacity if demand does not reach forecast.
  C. a high cost of inventories.
  D. planned capital investments occur earlier than needed.
  A. lack of capacity to fully meet demand.

  ---

  Explanation

  A capacity-lagging strategy means adding capacity only after demand has been proven. The primary disadvantage is the risk of not having enough capacity to meet sudden or unexpected demand, potentially leading to lost sales or customer dissatisfaction.

• Question 580:

  Zombieload, Meltdown, Spectre, and Fallout are all names of bugs that utilized which of the following types of attack?

  A. Side-channel
  B. Fault injection
  C. Man-In-The-Middle (MITM)
  D. Frequency analysis
  A. Side-channel

  ---

  Explanation