Which of the following is a privacy consideration for NOT sending large-scale SPAM type emails to a database of email addresses?
A. Poor user experience.
B. Emails are unsolicited.
C. Data breach notification.
D. Reduction in email deliverability score.
What is the main function of a breach response center?
A. Detecting internal security attacks.
B. Addressing privacy incidents.
C. Providing training to internal constituencies.
D. Interfacing with privacy regulators and governmental bodies.
Which of the following entities would most likely be exempt from complying with the General Data Protection Regulation (GDPR)?
A. A South American company that regularly collects European customers' personal data.
B. A company that stores all customer data in Australia and is headquartered in a European Union (EU) member state.
C. A Chinese company that has opened a satellite office in a European Union (EU) member state to service European customers.
D. A North American company servicing customers in South Africa that uses a cloud storage system made by a European company.
You are a wine collector who uses the web to do research about your hobby. You navigate to a news site and an ad for wine pops up. What kind of advertising is this?
A. Remnant.
B. Behavioral.
C. Contextual.
D. Demographic.
Which of the following is the best method to minimize tracking through the use of cookies?
A. Use `private browsing' mode and delete checked files, clear cookies and cache once a day.
B. Install a commercially available third-party application on top of the browser that is already installed.
C. Install and use a web browser that is advertised as `built specifically to safeguard user privacy'.
D. Manage settings in the browser to limit the use of cookies and remove them once the session completes.
SCENARIO
It should be the most secure location housing data in all of Europe, if not the world. The Global Finance Data Collective (GFDC) stores financial information and other types of client data from large banks, insurance companies, multinational corporations and governmental agencies. After a long climb on a mountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on your passport and national identification card. You are led down a long corridor with server rooms on each side, secured by combination locks built into the doors. You climb a flight of stairs and are led into an office that is lighted brilliantly by skylights where the GFDC Director of Security, Dr. Monique Batch, greets you. On the far wall you notice a bank of video screens showing different rooms in the facility. At the far end, several screens show different sections of the road up the mountain
Dr. Batch explains once again your mission. As a data security auditor and consultant, it is a dream assignment: The GFDC does not want simply adequate controls, but the best and most effective security that current technologies allow.
"We were hacked twice last year," Dr. Batch says, "and although only a small number of records were stolen, the bad press impacted our business. Our clients count on us to provide security that is nothing short of impenetrable and to do so quietly. We hope to never make the news again." She notes that it is also essential that the facility is in compliance with all relevant security regulations and standards.
You have been asked to verify compliance as well as to evaluate all current security controls and security measures, including data encryption methods, authentication controls and the safest methods for transferring data into and out of the facility. As you prepare to begin your analysis, you find yourself considering an intriguing question: Can these people be sure that I am who I say I am? You are shown to the office made available to you and are provided with system login information, including the name of the wireless network and a wireless key. Still pondering, you attempt to pull up the facility's wireless network, but no networks appear in the wireless list. When you search for the wireless network by name, however it is readily found.
What measures can protect client information stored at GFDC?
A. De-linking of data into client-specific packets.
B. Cloud-based applications.
C. Server-side controls.
D. Data pruning
Which is NOT a suitable method for assuring the quality of data collected by a third-party company?
A. Verifying the accuracy of the data by contacting users.
B. Validating the company's data collection procedures.
C. Introducing erroneous data to see if its detected.
D. Tracking changes to data through auditing.
After committing to a Privacy by Design program, which activity should take place first?
A. Create a privacy standard that applies to all projects and services.
B. Establish a retention policy for all data being collected.
C. Implement easy to use privacy settings for users.
D. Perform privacy reviews on new projects.
A healthcare provider would like to data mine information for research purposes however the Chief Privacy Officer is concerned medical data of individuals may be disclosed overcome the concern, which is the preferred technique for protecting such data while still allowing for analysis?
A. Access Control
B. Encryption
C. Isolation
D. Perturbation
A credit card with the last few numbers visible is an example of what?
A. Masking data
B. Synthetic data
C. Sighting controls.
D. Partial encryption
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only IAPP exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CIPT exam preparations and IAPP certification application, do not hesitate to visit our Vcedump.com to find your solutions here.