Question 151 · 284 in bank
Which of the following is NOT a step in the methodology of a privacy risk framework?
Show answer
Answer: D
Certified Information Privacy Technologist284 questions across 29 pages are complete and free, with no account or card.
284 questions in this bank
Free access · progress saved on this device
Which of the following is NOT a step in the methodology of a privacy risk framework?
Answer: D
Which of the following occurs when an individual takes a specific observable action to indicate and confirm that they give permission for their information to be processed?
Answer: A
A BaaS provider backs up the corporate data and stores it in an outsider provider under contract with the organization. A researcher notifies the organization that he found unsecured data in the cloud. The organization looked into the issue and realized one of its backups was misconfigured on the outside provider's cloud and the data fully exposed to the open internet. They quickly secured the backup. Which is the best next step the organization should take?
Answer: A
An organization is launching a new online subscription-based publication. As the service is not aimed at children, users are asked for their date of birth as part of the of the sign-up process. The privacy technologist suggests it may be more appropriate to ask if an individual is over 18 rather than requiring they provide a date of birth. What kind of threat is the privacy technologist concerned about?
Answer: A
Combining multiple pieces of information about an individual to produce a whole that is greater than the sum of its parts is called?
Answer: C
An organization is concerned that its aging IT infrastructure will lead to increased security and privacy risks. Which of the following would help mitigate these risks?
Answer: A
An organization has recently experienced a data breach where large amounts of personal data were compromised. As part of a post-incident review, the privacy technologist wants to analyze available data to understand what vulnerabilities may have contributed to the incident occurring. He learns that a key vulnerability had been flagged by the system but that detective controls were not operating effectively. Which type of web application security risk does this finding most likely point to?
Answer: D
There are two groups of users in a company, where one group is allowed to see credit card numbers, while the other group is not. Both are accessing the data through the same application. The most effective and efficient way to achieve this would be?
Answer: B
Which of the following is NOT a valid basis for data retention?
Answer: A
An organization needs to be able to manipulate highly sensitive personal information without revealing the contents of the data to the users. The organization should investigate the use of?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CIPT practice, question 151. 284 questions available.
Version 1.0.0. How we source questions