IAPP IAPP Certifications CIPT Questions & Answers

• Question 101:

  A company configures their information system to have the following capabilities:

  1.

  Allow for selective disclosure of attributes to certain parties, but not to others.

  2.

  Permit the sharing of attribute references instead of attribute values - such as "I am over 21" instead of birthday date.

  3.

  Allow for information to be altered or deleted as needed. These capabilities help to achieve which privacy engineering objective?

  A. Predictability.

  B. Manageability.

  C. Disassociability.

  D. Integrity.

  Correct Answer: B

  The capabilities described in the scenario focus on the ability to manage and control how personal information is handled within an information system. These include selective disclosure, attribute references instead of specific values, and the ability to alter or delete information as needed. This aligns with the privacy engineering objective of manageability, which refers to the capability to administer, configure, and manage privacy settings and controls within a system effectively. Manageability ensures that privacy preferences are easily applied and adhered to, and that individuals have control over their personal information within the system.

• Question 102:

  What is the main reason the Do Not Track (DNT) header is not acknowledged by more companies?

  A. Most web browsers incorporate the DNT feature.

  B. The financial penalties for violating DNT guidelines are too high.

  C. There is a lack of consensus about what the DNT header should mean.

  D. It has been difficult to solve the technological challenges surrounding DNT.

  Correct Answer: C

  Reference: https://en.wikipedia.org/wiki/Do_Not_Track

• Question 103:

  A developer is designing a new system that allows an organization's helpdesk to remotely connect into the device of the individual to provide support Which of the following will be a privacy technologist's primary concern"?

  A. Geofencing

  B. Geo-tracking

  C. Geo-tagging

  D. Geolocation

  Correct Answer: D

  a privacy technologist's primary concern when designing a new system that allows an organization's helpdesk to remotely connect into the device of the individual to provide support would be geolocation.

• Question 104:

  There are two groups of users. In a company, where one group Is allowed to see credit card numbers, while the other group Is not. Both are accessing the data through the same application. The most effective and efficient way to achieve this would be?

  A. Have two copies of the data, one copy where the credit card numbers are obfuscated, while the other copy has them in the clear. Serve up from the appropriate copy depending on the user accessing it.

  B. Have the data encrypted at rest, and selectively decrypt It for the users who have the rights to see it.

  C. Obfuscate the credit card numbers whenever a user who does not have the right to see them accesses the data.

  D. Drop credit card numbers altogether whenever a user who does not have the right to see them accesses the data.

  Correct Answer: B

  the most effective and efficient way to achieve this would be to have the data encrypted at rest, and selectively decrypt it for the users who have the rights to see it.

• Question 105:

  SCENARIO

  Please use the following to answer the next question:

  Jordan just joined a fitness-tracker start-up based in California, USA, as its first Information Privacy and Security Officer. The company is quickly growing its business but does not sell any of the fitness trackers itself. Instead, it relies on a distribution network of third-party retailers in all major countries. Despite not having any stores, the company has a 78% market share in the EU. It has a website presenting the company and products, and a member section where customers can access their information. Only the email address and physical address need to be provided as part of the registration process in order to customize the site to the user's region and country. There is also a newsletter sent every month to all members featuring fitness tips, nutrition advice, product spotlights from partner companies based on user behavior and preferences.

  Jordan says the General Data Protection Regulation (GDPR) does not apply to the company. He says the company is not established in the EU, nor does it have a processor in the region. Furthermore, it does not do any "offering goods or services" in the EU since it does not do any marketing there, nor sell to consumers directly. Jordan argues that it is the customers who chose to buy the products on their own initiative and there is no "offering" from the company.

  The fitness trackers incorporate advanced features such as sleep tracking, GPS tracking, heart rate monitoring. wireless syncing, calorie-counting and step-tracking. The watch must be paired with either a smartphone or a computer in order to collect data on sleep levels, heart rates, etc. All information from the device must be sent to the company's servers in order to be processed, and then the results are sent to the smartphone or computer. Jordan argues that there is no personal information involved since the company does not collect banking or social security information.

  Based on the current features of the fitness watch, what would you recommend be implemented into each device in order to most effectively ensure privacy?

  A. Hashing.

  B. A2DP Bluetooth profile.

  C. Persistent unique identifier.

  D. Randomized MAC address.

  Correct Answer: D

  For the fitness trackers, implementing randomized MAC addresses is an effective way to enhance user privacy. A MAC (Media Access Control) address is a unique identifier assigned to network interfaces for communications at the data link layer of a network segment. Randomizing these addresses can help protect user privacy by making it more difficult to track the device--and consequently the user--across different networks.

  This feature is particularly important for devices that frequently connect to various networks, such as fitness trackers with wireless syncing capabilities. By randomizing the MAC address, it becomes harder for third parties to consistently identify and track the device as it moves between different Wi-Fi networks, thereby enhancing user privacy. This approach is also beneficial in scenarios where other personal data might be considered non-identifiable, ensuring that the device itself doesn't become a vector for unintended personal data leakage.

• Question 106:

  SCENARIO

  Please use the following to answer the next question:

  Light Blue Health (LBH) is a healthcare technology company developing a new web and mobile application that collects personal health information from electronic patient health records. The application will use machine learning to recommend potential medical treatments and medications based on information collected from anonymized electronic health records. Patient users may also share health data collected from other mobile apps with the LBH app.

  The application requires consent from the patient before importing electronic health records into the application and sharing it with their authorized physicians or healthcare provider. The patient can then review and share the recommended treatments with their physicians securely through the app. The patient user may also share location data and upload photos in the app. The patient user may also share location data and upload photos in the app for a healthcare provider to review along with the health record. The patient may also delegate access to the app.

  LBH's privacy team meets with the Application development and Security teams, as well as key business stakeholders on a periodic basis. LBH also implements Privacy by Design (PbD) into the application development process.

  The Privacy Team is conducting a Privacy Impact Assessment (PIA) to evaluate privacy risks during development of the application. The team must assess whether the application is collecting descriptive, demographic or any other user related data from the electronic health records that are not needed for the purposes of the application. The team is also reviewing whether the application may collect additional personal data for purposes for which the user did not provide consent.

  What is the best way to ensure that the application only collects personal data that is needed to fulfill its primary purpose of providing potential medical and healthcare recommendations?

  A. Obtain consent before using personal health information for data analytics purposes.

  B. Provide the user with an option to select which personal data the application may collect.

  C. Disclose what personal data the application the collecting in the company Privacy Policy posted online.

  D. Document each personal category collected by the app and ensure it maps to an app function or feature.

  Correct Answer: D

  By documenting each personal data category collected by the app and ensuring that it maps to an app function or feature, Light Blue Health can help ensure that only necessary data is collected. This can help prevent over-collection of personal data and increase transparency about how user data is used.

• Question 107:

  SCENARIO

  Please use the following to answer the next question: Chuck, a compliance auditor for a consulting firm focusing on healthcare clients, was required to travel to the client's office to perform an onsite review of the client's operations. He rented a car from Finley Motors upon arrival at the airport as so he could commute to and from the client's office. The car rental agreement was electronically signed by Chuck and included his name, address, driver's license, make/model of the car, billing rate, and additional details describing the rental transaction. On the second night, Chuck was caught by a red light camera not stopping at an intersection on his way to dinner. Chuck returned the car back to the car rental agency at the end week without mentioning the infraction and Finley Motors emailed a copy of the final receipt to the address on file.

  Local law enforcement later reviewed the red light camera footage. As Finley Motors is the registered owner of the car, a notice was sent to them indicating the infraction and fine incurred. This notice included the license plate number, occurrence date and time, a photograph of the driver, and a web portal link to a video clip of the violation for further review. Finley Motors, however, was not responsible for the violation as they were not driving the car at the time and transferred the incident to AMP Payment Resources for further review. AMP Payment Resources identified Chuck as the driver based on the rental agreement he signed when picking up the car and then contacted Chuck directly through a written letter regarding the infraction to collect the fine.

  After reviewing the incident through the AMP Payment Resources' web portal, Chuck paid the fine using his personal credit card. Two weeks later, Finley Motors sent Chuck an email promotion offering 10% off a future rental.

  What should Finley Motors have done to incorporate the transparency principle of Privacy by Design (PbD)?

  A. Signed a data sharing agreement with AMP Payment Resources.

  B. Documented that Finley Motors has a legitimate interest to share Chuck's information.

  C. Obtained verbal consent from Chuck and recorded it within internal systems.

  D. Provided notice of data sharing practices within the electronically signed rental agreement.

  Correct Answer: D

  By providing clear and concise notice of its data sharing practices within the rental agreement that Chuck electronically signed, Finley Motors could have ensured that Chuck was informed about how his personal information would be used and shared. This would have helped to increase transparency and build trust with Chuck.

• Question 108:

  What privacy risk is NOT mitigated by the use of encrypted computation to target and serve online ads?

  A. The ad being served to the user may not be relevant.

  B. The user's sensitive personal information is used to display targeted ads.

  C. The personal information used to target ads can be discerned by the server.

  D. The user's information can be leaked to an advertiser through weak de-identification techniques.

  Correct Answer: D

• Question 109:

  An organization is considering launching enhancements to improve security and authentication mechanisms in their products. To better identify the user and reduce friction from the authentication process, they plan to track physical attributes of an individual. A privacy technologist assessing privacy implications would be most interested in which of the following?

  A. The purpose of the data tracking.

  B. That the individual is aware tracking is occurring.

  C. The authentication mechanism proposed.

  D. The encryption of individual physical attributes.

  Correct Answer: A

  a privacy technologist assessing privacy implications would be most interested in the purpose of the data tracking.

• Question 110:

  it Is Important for a privacy technologist to understand dark patterns In order to reduce the risk of which of the following?

  A. Breaches of an individual's data.

  B. Illicit collection of personal data.

  C. Manipulation of a user's choice.

  D. Discrimination from profiling.

  Correct Answer: C

  it is important for a privacy technologist to understand dark patterns in order to reduce the risk of manipulation of a user's choice. Dark patterns are user interface design choices that are intended to manipulate users into taking actions they might not otherwise take.