CIPT practice questions 141–150

1. Question 141 · 284 in bank

   What logs should an application server retain in order to prevent phishing attacks while minimizing data retention?

   • ALimited-retention, de-identified logs including only metadata.
   • BLimited-retention, de-identified logs including the links clicked in messages as well as metadata.
   • CLimited-retention logs including the identity of parties sending and receiving messages as well as metadata.
   • DLimited-retention logs including the links clicked in messages, the identity of parties sending and receiving them, as well as metadata.

   Show answer

   Answer: B

   Next question

2. Question 142 · 284 in bank

   Which of the following would be the most appropriate solution for preventing privacy violations related to information exposure through an error message?

   • AConfiguring the environment to use shorter error messages.
   • BHanding exceptions internally and not displaying errors to the user.
   • CCreating default error pages or error messages which do not include variable data.
   • DLogging the session name and necessary parameters once the error occurs to enable trouble shooting.

   Show answer

   Answer: C

   Next question

3. Question 143 · 284 in bank

   In day to day interactions with technology, consumers are presented with privacy choices. Which of the following best represents the Privacy by Design (PbD) methodology of letting the user choose a non-zero-sum choice?

   • AUsing images, words, and contexts to elicit positive feelings that result in proactive behavior, thus eliminating negativity and biases.
   • BProviding plain-language design choices that elicit privacy-related responses, helping users avoid errors and minimize the negative consequences of errors when they do occur.
   • CDisplaying the percentage of users that chose a particular option, thus enabling the user to choose the most preferred option.
   • DUsing contexts, antecedent events, and other priming concepts to assist the user in making a better privacy choice.

   Show answer

   Answer: B

   Next question

4. Question 144 · 284 in bank

   What risk is mitigated when routing video traffic through a company's application servers, rather than sending the video traffic directly from one user to another?

   • AThe user is protected against phishing attacks.
   • BThe user's identity is protected from the other user.
   • CThe user's approximate physical location is hidden from the other user.
   • DThe user is assured that stronger authentication methods have been used.

   Show answer

   Answer: B

   Next question

5. Question 145 · 284 in bank

   Organizations understand there are aggregation risks associated with the way the process their customer's data. They typically include the details of this aggregation risk in a privacy notice and ask that all customers acknowledge they understand these risks and consent to the processing. What type of risk response does this notice and consent represent?

   • ARisk transfer.
   • BRisk mitigation.
   • CRisk avoidance.
   • DRisk acceptance.

   Show answer

   Answer: D

   Next question

6. Question 146 · 284 in bank

   Which is likely to reduce the types of access controls needed within an organization?

   • ADecentralization of data.
   • BRegular data inventories.
   • CStandardization of technology.
   • DIncreased number of remote employees.

   Show answer

   Answer: C

   Next question

7. Question 147 · 284 in bank

   What is an Access Control List?

   • AA list of steps necessary for an individual to access a resource.
   • BA list that indicates the type of permission granted to each individual.
   • CA list showing the resources that an individual has permission to access.
   • DA list of individuals who have had their access privileges to a resource revoked.

   Show answer

   Answer: B

   Next question

8. Question 148 · 284 in bank

   Which of the following is an example of drone `swarming`?

   • AA drone filming a cyclist from above as he rides.
   • BA drone flying over a building site to gather data.
   • CDrones delivering retailers' packages to private homes.
   • DDrones communicating with each other to perform a search and rescue.

   Show answer

   Answer: D

   Next question

9. Question 149 · 284 in bank

   An individual drives to the grocery store for dinner. When she arrives at the store, she receives several unsolicited notifications on her phone about discounts on items at the grocery store she is about to shop at. Which type of privacy problem does this represent?

   • AIntrusion
   • BSurveillance
   • CDecisional Interference
   • DExposure

   Show answer

   Answer: A

   Next question

10. Question 150 · 284 in bank

    What is the most effective first step to take to operationalize Privacy by Design principles in new product development and projects?

    • AImplementing a mandatory privacy review and legal approval process.
    • BObtain leadership buy-in for a mandatory privacy review and approval process.
    • CSet up an online Privacy Impact Assessment tool to facilitate Privacy by Design compliance.
    • DConduct annual Privacy by Design training and refreshers for all impacted personnel.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPT practice, question 141. 284 questions available.