CIPT practice questions 171–180

1. Question 171 · 284 in bank

   All of the following topics should be included in a workplace surveillance policy EXCEPT?

   • AWho can be tracked and when.
   • BWho can access surveillance data.
   • CWhat areas can be placed under surveillance.
   • DWho benefits from collecting surveillance data.

   Show answer

   Answer: D

   Next question

2. Question 172 · 284 in bank

   Which of the following would be an example of an "objective" privacy harm to an individual?

   • AReceiving spam following the sale an of email address
   • BNegative feelings derived from government surveillance
   • CSocial media profile views indicating unexpected interest in a person.
   • DInaccuracies in personal data

   Show answer

   Answer: D

   Next question

3. Question 173 · 284 in bank

   Which of the following is the best action to apply to personally identifiable data when the retention period ends?

   • AHashing
   • BPseudonymization
   • CTagging.
   • DDeletion

   Show answer

   Answer: D

   Next question

4. Question 174 · 284 in bank

   Which of the following is most important to provide to the data subject before the collection phase of the data lifecycle?

   • APrivacy Notice
   • BDisclosure Policy
   • CConsent Request
   • DData Protection Policy

   Show answer

   Answer: C

   Next question

5. Question 175 · 284 in bank

   Which of the following is a stage in the data life cycle?

   • AData classification
   • BData inventory
   • CData masking
   • DData retention

   Show answer

   Answer: D

   Next question

6. Question 176 · 284 in bank

   An organization must terminate their cloud vendor agreement immediately What is the most secure way to delete the encrypted data stored in the cloud?

   • ATransfer the data to another location
   • BInvoke the appropriate deletion clause in the cloud terms and conditions.
   • CObtain a destruction certificate from the cloud vendor
   • DDestroy all encryption keys associated with the data

   Show answer

   Answer: D

   Next question

7. Question 177 · 284 in bank

   When writing security policies, the most important consideration is to?

   • ARequire all employees to read and acknowledge their understanding
   • BEnsure they are based on the organization's risk profile
   • CEnsure they cover enough details for common situations
   • DFollow industry best practices

   Show answer

   Answer: B

   Next question

8. Question 178 · 284 in bank

   In terms of data extraction, which of the following should NOT be considered by a privacy technologist in relation to data portability?

   • AThe size of the data
   • BThe format of the data
   • CThe range of the data
   • DThe medium of the data

   Show answer

   Answer: D

   Next question

9. Question 179 · 284 in bank

   Which activity should the privacy technologist undertake to reduce potential privacy risk when evaluating options to process data in a country other than where it would be collected?

   • AReview the Data Life Cycle
   • BReview data retention policies
   • CCreate enterprise data flow diagrams
   • DRecommend controls for data transfers

   Show answer

   Answer: D

   Next question

10. Question 180 · 284 in bank

    Information classification helps an organization protect confidential and nonpublic information primarily because?

    • AIt helps identify sensitive and critical information that require very strict safeguards
    • BIt falls under the security principles of confidentiality, integrity, and availability
    • CIt promotes employee accountability for safeguarding confidential information
    • DIt is legally required under most regulations

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPT practice, question 171. 284 questions available.