CIPT practice questions 21–30

1. Question 21 · 284 in bank

   Which is NOT a suitable method for assuring the quality of data collected by a third-party company?

   • AVerifying the accuracy of the data by contacting users.
   • BValidating the company's data collection procedures.
   • CIntroducing erroneous data to see if its detected.
   • DTracking changes to data through auditing.

   Show answer

   Answer: C

   Next question

2. Question 22 · 284 in bank

   A valid argument against data minimization is that it?

   • ACan limit business opportunities.
   • BDecreases the speed of data transfers.
   • CCan have an adverse effect on data quality.
   • DIncreases the chance that someone can be identified from data.

   Show answer

   Answer: A

   Next question

3. Question 23 · 284 in bank

   What is the main reason a company relies on implied consent instead of explicit consent from a user to process her data?

   • AThe implied consent model provides the user with more detailed data collection information.
   • BTo secure explicit consent, a user's website browsing would be significantly disrupted.
   • CAn explicit consent model is more expensive to implement.
   • DRegulators prefer the implied consent model.

   Show answer

   Answer: B

   Next question

4. Question 24 · 284 in bank

   What is the main benefit of using dummy data during software testing?

   • AThe data comes in a format convenient for testing.
   • BStatistical disclosure controls are applied to the data.
   • CThe data enables the suppression of particular values in a set.
   • DDevelopers do not need special privacy training to test the software.

   Show answer

   Answer: D

   Next question

5. Question 25 · 284 in bank

   How does k-anonymity help to protect privacy in micro data sets?

   • ABy ensuring that every record in a set is part of a group of "k" records having similar identifying information.
   • BBy switching values between records in order to preserve most statistics while still maintaining privacy.
   • CBy adding sufficient noise to the data in order to hide the impact of any one individual.
   • DBy top-coding all age data above a value of "k."

   Show answer

   Answer: A

   Next question

6. Question 26 · 284 in bank

   Which of the following statements describes an acceptable disclosure practice?

   • AAn organization's privacy policy discloses how data will be used among groups within the organization itself.
   • BWith regard to limitation of use, internal disclosure policies override contractual agreements with third parties.
   • CIntermediaries processing sensitive data on behalf of an organization require stricter disclosure oversight than vendors.
   • DWhen an organization discloses data to a vendor, the terms of the vendor' privacy notice prevail over the organization' privacy notice.

   Show answer

   Answer: A

   Next question

7. Question 27 · 284 in bank

   How should the sharing of information within an organization be documented?

   • AWith a binding contract.
   • BWith a data flow diagram.
   • CWith a disclosure statement.
   • DWith a memorandum of agreement.

   Show answer

   Answer: B

   Next question

8. Question 28 · 284 in bank

   What can be used to determine the type of data in storage without exposing its contents?

   • ACollection records.
   • BData mapping.
   • CServer logs.
   • DMetadata.

   Show answer

   Answer: D

   Next question

9. Question 29 · 284 in bank

   What must be done to destroy data stored on "write once read many" (WORM) media?

   • AThe data must be made inaccessible by encryption.
   • BThe erase function must be used to remove all data.
   • CThe media must be physically destroyed.
   • DThe media must be reformatted.

   Show answer

   Answer: C

   Next question

10. Question 30 · 284 in bank

    Which of the following would best improve an organization' s system of limiting data use?

    • AImplementing digital rights management technology.
    • BConfirming implied consent for any secondary use of data.
    • CApplying audit trails to resources to monitor company personnel.
    • DInstituting a system of user authentication for company personnel.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPT practice, question 21. 284 questions available.