IAPP CIPM Online Practice Questions and Exam Preparation

IAPP CIPM Online Questions & Answers

• Question 81:

  Which burden of proof has been applied when a workplace investigation has a 51 percent or greater certainty that allegations are true?

  A. Preponderance of evidence
  B. Beyond a reasonable doubt
  C. Some credible evidence
  D. Clear and convincing
  A. Preponderance of evidence

  ---

  Explanation

• Question 82:

  The planned channels of Inventory disbursement from one or more sources to field warehouses are known as:

  A. a supply chain community.
  B. interplant demand.
  C. a bill of distribution.
  D. logistics data interchange (LDI).
  C. a bill of distribution.

  ---

  Explanation

  A bill of distribution (BOD) defines the planned channels for inventory disbursement from central or regional supply points (e.g., plants or distribution centers) to field warehouses. It is the distribution counterpart of a bill of material and is essential in distribution requirements planning (DRP).

• Question 83:

  Which of the following MUST be checked during the validation of software verification capabilities?

  A. Security
  B. Completeness
  C. Vulnerabilities
  D. Logic
  B. Completeness

  ---

  Explanation

• Question 84:

  A security engineer is reviewing Incident Response (IR) roles and responsibilities. Several roles have static elevated privileges in case an incident occurs. Instead of static access, what is the BEST access method to manage elevated privileges?

  A. Just-in-time
  B. Delegated
  C. Break-glass
  D. Automated
  A. Just-in-time

  ---

  Explanation

• Question 85:

  Which of the following outcomes Is a benefit of mixed-model scheduling?

  A. Increased inventory
  B. Improved demand response
  C. Fewer setups
  D. Fewer material shortages
  B. Improved demand response

  ---

  Explanation

  Mixed-model scheduling enables the production of a variety of products in small batches, allowing the manufacturer to respond more quickly to changes in customer demand without holding excessive inventory.

• Question 86:

  Open Authorized (OAuth) has been chosen as technology to use across applications in the enterprise. Which of the following statements is TRUE about an OAuth token?

  A. Does not specify a time interval
  B. Can be used for authentication
  C. Can be used across multiple sites
  D. Specifies what information can be accessed
  D. Specifies what information can be accessed

  ---

  Explanation

• Question 87:

  We have observed the inventory system does not handle plastic parts well." What should be added to the problem statement to make it more useful?

  A. Measurements that help describe the problem
  B. Guidance to which problem-solving tools should be used
  C. Criteria for selecting the improvement team
  D. Description of who is responsible for the problem
  A. Measurements that help describe the problem

  ---

  Explanation

  To make a problem statement more useful, it should be specific and measurable. Adding measurements (e.g., frequency of issues, error rates, delays caused, etc.) helps quantify the problem, track progress, and evaluate solutions effectively.

• Question 88:

  An organization needs a firewall that maps packets to connections and uses Transmission Control Protocol /Internet Protocol (TCP/IP) header fields to keep track of connections. Which type of firewall will be recommended?

  A. Network
  B. Stateless
  C. Stateful
  D. Packet
  C. Stateful

  ---

  Explanation

• Question 89:

  A cloud-based web application requires the use of cryptographic keys to encrypt user-uploaded files at rest. Where is the safest place to store these cryptographic keys?

  A. Keys are stored in a password protected zip file.
  B. Keys are stored with source code in a revision control system.
  C. Keys are stored in a cloud-based file storage system.
  D. Keys are stored in a central, internal key management system.
  D. Keys are stored in a central, internal key management system.

  ---

  Explanation

• Question 90:

  A newer automotive supplier has not fully developed its information technology (IT) systems. The supplier has Just received a contract from a large automotive manufacturer which requires the supplier to use electronic data interchange (EDI) transactions for receiving orders, sending advance ship notices (ASNs), and receiving invoice payments. What strategy can the supplier adopt to immediately meet the EDI requirements?

  A. Select, install, and implement EDI software.
  B. Use current third-party logistics provider (3PL) to handle the EDI transactions.
  C. Claim hardship and ask the automotive manufacturer for a waiver.
  D. Negotiate using email as an alternative with the customer.
  B. Use current third-party logistics provider (3PL) to handle the EDI transactions.

  ---

  Explanation

  Since the supplier needs to immediately meet the EDI requirements and does not have mature IT systems, using an existing third-party logistics provider (3PL) that already supports EDI is the most practical and timely solution. This avoids the delay and cost of developing or installing their own EDI system.