IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 71:

  Broadcast traffic is causing network performance degradation of sensitive equipment.

  Which of the following methods is used to prevent the broadcast traffic from impacting availability?

  A. Place the sensitive equipment behind a firewall to prevent the broadcast traffic from impacting the equipment.
  B. Implement Quality of Service (QoS) on network switches to throttle the sensitive equipment traffic.
  C. Move the sensitive equipment to a different switch port to prevent the broadcast traffic from impacting the equipment.
  D. Use Network Access Control (NAC) to prevent the broadcast traffic from broadcasting.
  C. Move the sensitive equipment to a different switch port to prevent the broadcast traffic from impacting the equipment.

  ---

  Explanation

• Question 72:

  An organization has hired a new auditor to review its critical systems infrastructure for vulnerabilities. Which of the following BEST describes the methodology the auditor will use?

  A. Select an appropriate sample size of changes to production servers related to critical systems within the audit period and ensure they adhere to documented policies and standards.
  B. Select an appropriate sample size of recently deployed servers and review their configuration files against the organization's policies and standards.
  C. Select all production servers related to critical systems and review their configuration files against the organization's policies and standards.
  D. Select an appropriate sample size of changes to recently deployed servers within the audit period and ensure they adhere to documented policies and standards.
  A. Select an appropriate sample size of changes to production servers related to critical systems within the audit period and ensure they adhere to documented policies and standards.

  ---

  Explanation

• Question 73:

  What are the FIRST two steps an organization should conduct to classify its assets?

  A. Define user requirements and collate existing inventories
  B. Categorize assets and set minimum security controls
  C. Conduct an inventory of assets and determine the owners
  D. Obtain senior management buy-in and conduct a risk assessment
  C. Conduct an inventory of assets and determine the owners

  ---

  Explanation

• Question 74:

  In a Zero Trust (ZT) model, where should the enforcement component be placed and why?

  A. As close to the workload as possible, because it impacts authorization decisions
  B. Between the data stores and the trust engine, because it improves security policies
  C. As close to the workload as possible, because it impacts authentication decisions
  D. Between the policy engine and the trust engine, because it enforces security policies
  A. As close to the workload as possible, because it impacts authorization decisions

  ---

  Explanation

• Question 75:

  When a small number of items often dominate the results achieved in any situation, this is called:

  A. Standard law
  B. Recessive Act
  C. Pareto's law
  D. Petite Act
  C. Pareto's law

  ---

  Explanation

  Pareto's law, also known as the 80/20 rule, states that a small number of causes (often around 20%) account for a large portion (around 80%) of the results. It's commonly used in inventory and quality management to focus on the most impactful items or issues.

• Question 76:

  Which of the following is the MOST important consideration in a full-scale disaster recovery test?

  A. Sign off by the Chief Information Officer (CIO)
  B. Financial cost of the organization
  C. Business interruption
  D. Available Information Technology (IT) hardware
  C. Business interruption

  ---

  Explanation

• Question 77:

  In which of the following situations would you use an X-bar chart?

  A. Track the number of defects that are found in each unit.
  B. Measure the difference between the largest and the smallest in a sample.
  C. Determine the average value of a group of units.
  D. Estimate a subgroup variation.
  C. Determine the average value of a group of units.

  ---

  Explanation

  An X-bar chart is used in statistical process control (SPC) to monitor the average (mean) value of a characteristic from a sample (subgroup) of items over time. It helps detect shifts in the process mean.

• Question 78:

  Which of the following are the major objectives of Material Requirement Planning?

  A. Determine requirements and keep priorities current.
  B. Determine requirements and support production activities
  C. Control and monitoring material demands
  D. Control the performance of the order
  A. Determine requirements and keep priorities current.

  ---

  Explanation

  The major objectives of Material Requirements Planning (MRP) are:

  To determine material requirements: What to order, how much, and when.

  To keep priorities current: Adjust schedules as demand, inventory, or production conditions change.

  These objectives ensure that materials are available for production while minimizing inventory and ensuring timely delivery.

  Other options:

  B: Support production activities: A valid function, but not the primary objective.

  C: Control and monitoring material demands: More about execution and oversight.

  D: Control the performance of the order: Related to production control, not specifically MRP's core objective.

  Therefore, the correct answer is A.

• Question 79:

  What is the process when a security assessor compiles potential targets from the attacker's perspective, such as data flows, and interactions with users?

  A. Threat categorization
  B. Threat avoidance
  C. Threat acceptance
  D. Threat mitigation
  A. Threat categorization

  ---

  Explanation

• Question 80:

  A consultant has been engaged to support the team in analyzing why the development of a new software product has slipped schedule by a year. The consultant discovered an increase of the functionality requirements due to the failure of the asset tracking program. Which of the following BEST describes which system lifecycle element is impacted?

  A. Stakeholder identification
  B. Vision statement
  C. Operational efficiency
  D. Solution boundary
  D. Solution boundary

  ---

  Explanation