IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 51:

  A security engineer must address resource sharing between various applications without adding physical hardware to the environment. Which secure design principle is used to BEST segregate applications?

  A. Network firewalls
  B. Logical isolation
  C. Application firewalls
  D. Physical isolation
  B. Logical isolation

  ---

  Explanation

• Question 52:

  Which of the following product design approaches are likely to reduce time to market for a global supply chain?

  A. Concurrent engineering
  B. Design for manufacture
  C. Design for logistics
  D. Quality function deployment (QFD)
  A. Concurrent engineering

  ---

  Explanation

  Concurrent engineering is a product design approach where design, development, and other functions (such as manufacturing and supply chain) are carried out in parallel rather than sequentially. This reduces time to market, especially in complex, global supply chains, by enabling faster decision-making and reducing rework.

• Question 53:

  The total line-haul cost varies with:

  A. cost per mile
  B. the distance moved
  C. weight moved
  D. Only A and B
  D. Only A and B

  ---

  Explanation

  Line-haul cost refers to the cost of transporting goods between two major points (e.g., from warehouse to distribution center), excluding pickup and delivery.

  The total line-haul cost depends on:

  A: Cost per mile: The rate charged per mile of transportation.

  B: Distance moved: The number of miles the goods are transported.

  Why not C:

  C: Weight moved: Affects cost in some rate structures (like LTL-less-than-truckload), but line-haul cost is typically calculated based on distance and cost per mile, especially for full truckloads or standard line-haul contracts.

  Thus, the correct answer is: D: Only A and

  B.

• Question 54:

  After a recent threat modeling workshop, the organization has requested that the Chief Information Security Officer (CISO) implement zero trust (ZT) policies. What was the MOST likely threat identified in the workshop?

  A. Natural threats
  B. Elevation of privilege
  C. Repudiation
  D. Information disclosure
  B. Elevation of privilege

  ---

  Explanation

• Question 55:

  An organization starts to develop a drone inspection and defect detection system includes different subsystems running at different clouds from different service providers. During the architectural design phase, which security architecture principle should be the MOST important for the security engineer to apply?

  A. Security by design
  B. Default deny
  C. Security by default
  D. Security before design
  A. Security by design

  ---

  Explanation

• Question 56:

  An organization has to conduct quarterly reviews of user authorization access to its primary financial application. Which position is responsible for performing these reviews?

  A. Internal audit manager
  B. Information Security Manager (ISM)
  C. Data custodian
  D. Data owner
  D. Data owner

  ---

  Explanation

• Question 57:

  What is the MAIN purpose of risk and impact analysis?

  A. Calculate the cost of implementing effective countermeasures.
  B. Calculate the effort of implementing effective countermeasures.
  C. Identify countermeasures.
  D. Eliminate the risk of most threats.
  C. Identify countermeasures.

  ---

  Explanation

• Question 58:

  Which of the following BEST effective when protecting against insider threats?

  A. Implement Two-Factor Authentication (2FA).
  B. Segment data repositories by business rules.
  C. Develop recovery and restoration procedures.
  D. Address security in third-party agreements.
  B. Segment data repositories by business rules.

  ---

  Explanation

• Question 59:

  An effective approach to projecting requirements for materials with long lead times Includes which of the following options?

  A. Initiate a multilevel master schedule.
  B. Use phantom bills of materials (BOMs).
  C. Increase the level of safety stock.
  D. Decrease the planning horizon.
  A. Initiate a multilevel master schedule.

  ---

  Explanation

  For materials with long lead times, an effective approach is to use a multilevel master schedule. This ensures that all levels of the bill of material (BOM), including long-lead components, are planned and visible early enough to meet production needs. It provides better visibility and coordination across multiple product levels.

• Question 60:

  Which of the following should recommendations from a Plan Of Action And Milestones (POAandM) be based on?

  A. Continuous monitoring
  B. Change Control Board (CCB) coordination
  C. Risk acceptance
  D. Root cause analysis
  D. Root cause analysis

  ---

  Explanation