Question 181 · 284 in bank
When designing a new system, which of the following is a privacy threat that the privacy technologist should consider?
Show answer
Answer: C
Certified Information Privacy Technologist284 questions across 29 pages are complete and free, with no account or card.
284 questions in this bank
Free access · progress saved on this device
When designing a new system, which of the following is a privacy threat that the privacy technologist should consider?
Answer: C
Ivan is a nurse for a home healthcare service provider in the US. The company has implemented a mobile application which Ivan uses to record a patient's vital statistics and access a patient's health care records during home visits. During one visit, Ivan is unable to access the health care application to record the patient’s vitals. He instead records the information on his mobile phone's note-taking application to enter the data in the health care application the next time it is accessible. What would be the best course of action by the IT department to ensure the data is protected on his device?
Answer: D
Which activity best supports the principle of data quality from a privacy perspective?
Answer: D
Which of the following is one of the fundamental principles of information security?
Answer: C
An organization's customers have suffered a number of data breaches through successful social engineering attacks. One potential solution to remediate and prevent future occurrences would be to implement which of the following?
Answer: B
A clinical research organization is processing highly sensitive personal data including numerical attributes, from medical trial results. The organization needs to manipulate the data without revealing the contents to data users. This can be achieved by utilizing?
Answer: D
To meet data protection and privacy legal requirements that may require personal data to be disposed of or deleted when no longer necessary for the use it was collected, what is the best privacy-enhancing solution a privacy technologist should recommend be implemented in application design to meet this requirement?
Answer: C
An organization is reliant on temporary contractors for performing data analytics and they require access to personal data via software-as-a-service to perform their job. When the temporary contractor completes their work assignment, what would be the most effective way to safeguard privacy and access to personal data when they leave?
Answer: B
SCENARIO - Please use the following to answer the next question: Light Blue Health (LBH) is a healthcare technology company developing a new web and mobile application that collects personal health information from electronic patient health records. The application will use machine learning to recommend potential medical treatments and medications based on information collected from anonymized electronic health records. Patient users may also share health data collected from other mobile apps with the LBH app. The application requires consent from the patient before importing electronic health records into the application and sharing it with their authorized physicians or healthcare provider. The patient can then review and share the recommended treatments with their physicians securely through the app. The patient user may also share location data and upload photos in the app. The patient user may also share location data and upload photos in the app for a healthcare provider to review along with the health record. The patient may also delegate access to the app. LBH’s privacy team meets with the Application development and Security teams, as well as key business stakeholders on a periodic basis. LBH also implements Privacy by Design (PbD) into the application development process. The Privacy Team is conducting a Privacy Impact Assessment (PIA) to evaluate privacy risks during development of the application. The team must assess whether the application is collecting descriptive, demographic or any other user related data from the electronic health records that are not needed for the purposes of the application. The team is also reviewing whether the application may collect additional personal data for purposes for which the user did not provide consent. What is the best way to minimize the potential harms from a data breach?
Answer: B
Which of the following is a privacy consideration for NOT sending large-scale SPAM type emails to a database of email addresses?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CIPT practice, question 181. 284 questions available.
Version 1.0.0. How we source questions