IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 581:

  An organization is considering options to outsource their Information Technology (IT) operations. Although they do not sell anything on the Internet, they have a strong requirement in uptime of their application. After evaluating the offerings received by the Cloud Service Provider (CSP), the IT manager decided it was mandatory to develop processes to continue operations without access to community or public cloud-based applications. Which of the following arguments MOST likely led the IT manager to make this decision?

  A. Circumstances may force a cloud provider to discontinue operations
  B. Most cloud service offerings are unique to each provider and may not be easily portable
  C. Integrity and confidentiality are not ensured properly on most cloud service offerings
  D. The need to develop alternative hosting strategies for applications deployed to the cloud
  A. Circumstances may force a cloud provider to discontinue operations

  ---

  Explanation

• Question 582:

  Gather the information needed by the shop floor to make the product. Release orders to the shop floor as authorized by the material equipment plan. This is called dispatching. Production activity control will do such things in:

  A. Planning phase
  B. Implementation phase
  C. Control phase
  D. Both A and B
  B. Implementation phase

  ---

  Explanation

  Production Activity Control (PAC) involves multiple phases:

  In the Implementation phase, PAC:

  Gathers necessary information

  Releases orders to the shop floor

  Initiates dispatching, which is the act of authorizing work to begin

  This phase is where actual execution starts, based on previously created plans.

  Other options:

  A: Planning phase: Involves preparing schedules and resource allocation-not dispatching.

  C: Control phase: Involves monitoring and adjusting progress-not releasing or initiating.

  D: Both A and B: Incorrect-dispatching specifically occurs in the implementation phase. Correct answer: B: Implementation phase.

• Question 583:

  A company can easily change Its workforce, but inventory carrying costs are high. Which of the following strategies would be most appropriate during times of highly fluctuating demand?

  A. Produce to backorders
  B. Produce at a constant level
  C. Produce to the sales forecast
  D. Produce to demand
  D. Produce to demand

  ---

  Explanation

  When a company can easily adjust its workforce but has high inventory carrying costs, the best strategy during highly fluctuating demand is to produce to demanD: This minimizes inventory levels and associated costs while allowing flexibility in production through workforce adjustments.

• Question 584:

  Which Open Systems Interconnection (OSI) layer is concerned with Denial-Of-Service (DoS) SYN flood attacks?

  A. Data
  B. Physical
  C. Network
  D. Transport
  D. Transport

  ---

  Explanation

• Question 585:

  During a threat modeling exercise using the Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE) framework, it was identified that a web server allocates a socket and forks each time it receives a request from a user without limiting the number of connections or requests.

  Which of the following security objectives is MOST likely absent in the web server?

  A. Integrity
  B. Authenticity
  C. Availability
  D. Authorization
  C. Availability

  ---

  Explanation

• Question 586:

  As the organization requires user friendly access to a new web-based application, a software developer decides to implement Single Sign-On (SSO). The developer uses the de-facto standard for web-based applications and the implementation includes the use of a JavaScript Object Notation (JSON) web token. With this information, which is the BEST way for the software developer to establish SSO capability?

  A. The developer Inputs the user's account, the user's password, and a token.
  B. The developer uses the user's credentials stored within the web-based application.
  C. The developer uses Transport Layer Security (TLS) certificates and Open ID Connect (OIDC).
  D. The developer uses Open ID Connect (OIDC) and Open Authorization (OAuth).
  D. The developer uses Open ID Connect (OIDC) and Open Authorization (OAuth).

  ---

  Explanation

• Question 587:

  In order to meet retention requirements, it may be necessary to migrate digital records to different media because of which of the following issues?

  A. Deduplication conserves storage.
  B. Regulatory guidance requires compliance.
  C. Digital media can degrade.
  D. Hierarchical storage facilitates access.
  C. Digital media can degrade.

  ---

  Explanation

• Question 588:

  The consolidation of several units into large units, called unit loads, so there is less handling, this is referred to as:

  A. Exclusiveness
  B. Itemization
  C. Unitization
  D. Solitary
  C. Unitization

  ---

  Explanation

  Unitization is the process of combining several smaller units into one larger unit (e.g., using pallets, containers, or shrink wrap) to: Reduce handling time Improve storage and transport efficiency Minimize damage and loss

• Question 589:

  Which of the following security techniques can be used to ensure the integrity of software as well as determine who developed the software?

  A. Independent verification and validation
  B. Code signing
  C. Digital Rights Management (DRM)
  D. Software assessment
  B. Code signing

  ---

  Explanation

• Question 590:

  An organization is working to secure its Supervisory Control And Data Acquisition (SCADA) system, Which monitors water supply to the city. What type of security should the organization ensure FIRST?

  A. Endpoint security
  B. Network security
  C. Cyber physical security
  D. Cloud security
  C. Cyber physical security

  ---

  Explanation