CIPT practice questions 241–250

1. Question 241 · 284 in bank

   A company is looking to adopt new technology which the privacy technologist on the project believes may be unethical from a privacy standpoint. How should the privacy technologist respond?

   • AStop the project by exercising veto rights.
   • BImplement privacy technical measures to help mitigate the identified privacy risks.
   • CAdvise the project team about legal mechanisms it could adopt to manage the ethical considerations.
   • DPerform an audit of privacy controls post implementation to show leadership how unethical the project actually was.

   Show answer

   Answer: B

   Next question

2. Question 242 · 284 in bank

   When designing a new system, which of the following is a privacy threat that the privacy technologist should consider?

   • ACaching.
   • BDark patterns.
   • CSocial engineering.
   • DIdentity and Access Management.

   Show answer

   Answer: B

   Next question

3. Question 243 · 284 in bank

   When consulting on privacy policies, a privacy technologist should FIRST?

   • AAlign with industry best practices.
   • BConsider the organization’s risk profile.
   • CEngage with the relevant external stakeholders.
   • DRequire senior leadership to review and provide input.

   Show answer

   Answer: B

   Next question

4. Question 244 · 284 in bank

   In terms of data extraction, which of the following should NOT be considered by a privacy technologist in relation to the ease of an individual to reuse personal data across different IT environments?

   • AThe size of the data.
   • BThe format of the data.
   • CThe medium of the data.
   • DThe interoperability of the data.

   Show answer

   Answer: A

   Next question

5. Question 245 · 284 in bank

   A data scientist wants to improve her customer satisfaction prediction reports and has some ideas to improve the model. This procedure will involve copying the customer database from production to a test environment. To ensure privacy protection of customer information, the data scientist asked the privacy engineers for guidance. Which of the following Privacy Enhancing Techniques (PETs) would be best suited to support her analysis but reduce privacy risks?

   • AUse sample data.
   • BUse synthetic data.
   • CUse anonymized data.
   • DUse pseudonymized data

   Show answer

   Answer: B

   Next question

6. Question 246 · 284 in bank

   One difference between privacy threat modeling and information security threat modeling is?

   • APrivacy threat modeling looks at threats to the individual while security threat modeling looks at threats to the organization.
   • BSecurity threat modeling is required by regulations such as the HIPAA Privacy Rule, but privacy threat modeling is not.
   • CPrivacy threat modeling does not consider technical defects such as software vulnerabilities.
   • DPrivacy threat modeling must consider insider threats, but security threat modeling does not.

   Show answer

   Answer: A

   Next question

7. Question 247 · 284 in bank

   A Back-up-as-Service (BaaS) provider backs up corporate data and stores it with an outsider provider under contract with the organization. A researcher notifies the organization that he found unsecured data in the cloud. The organization looked into the issue and realized one of its backups was misconfigured on the outside provider's cloud and the data was fully exposed to the open internet. The service provider quickly secured the backup. Which is the best next step the organization should take?

   • AReview the content of the data exposed.
   • BInvestigate using alternate BaaS providers or on-premise backup systems.
   • CDisconnect from the service and request a meeting with the outside provider
   • DNotify the relevant regulatory authorities and any customers affected by this incident.

   Show answer

   Answer: D

   Next question

8. Question 248 · 284 in bank

   What occurs during data distortion?

   • AFalse and inaccurate information about an individual is shared
   • BData collected about an individual includes prejudicial assumptions
   • CThe personal data about an individual is modified to preserve their anonymity
   • DTruthful information that negatively affects how others view an individual is revealed

   Show answer

   Answer: C

   Next question

9. Question 249 · 284 in bank

   Which of the following is the primary privacy consideration with regard to the use of large-scale, unsolicited commercial emails?

   • AThe source of the emails may be disguised on purpose.
   • BThe email addresses may be gathered without consent.
   • CThe recipients may receive fraudulent or deceptive emails.
   • DThe recipients’ email addresses may contain inaccuracies.

   Show answer

   Answer: B

   Next question

10. Question 250 · 284 in bank

    In jurisdictions where children are legally protected online, privacy controls should be implemented in each of the following situations EXCEPT?

    • AA virtual jigsaw puzzle game marketed for ages 5-9 displays pieces of the puzzle on a handheld screen. Once the child completes a certain level, it flashes a message about new themes released that day.
    • BA child logs in to a system to use an interactive toy that copies the child’s behavior through gestures and kid-friendly sounds.
    • CA math tutoring service commissioned an advertisement on a bulletin board inside a school. The service makes it simple for children to reach out to tutors by entering a through a QR-code through their school account.
    • DA note-taking application converts hard copies of kids’ class notes into audio books in seconds and stores a copy in the cloud in the students’ account.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPT practice, question 241. 284 questions available.