IAPP CIPP-US 실제 시험문제 및 답변

문제1
In most cases, the FTC settles disputes through consent decrees and consent orders. What is the maximum length of a consent decree?

A. 10 years

B. Indefinitely

C. 20 years

D. 5 years

정답: C

설명: (ExamPassdump 회원만 볼 수 있음)

문제2
Sarah lives in San Francisco, California. Based on a dramatic increase in unsolicited commercial emails, Sarah believes that a major social media platform with over 50 million users has collected a lot of personal information about her. The company that runs the platform is based in New York and France.
Why is Sarah entitled to ask the social media platform to delete the personal information they have collected about her?

A. Any company with a presence in Europe must comply with the General Data Protection Regulation globally, including in response to data subject deletion requests.

B. The California Consumer Privacy Act entitles Sarah to request deletion of her personal information.

C. The New York "Stop Hacks and Improve Electronic Data Security" (SHIELD) Act requires that businesses under New York's jurisdiction must delete customers' personal information upon request.

D. Under Section 5 of the FTC Act, the Federal Trade Commission has held that refusing to delete an individual's personal information upon request constitutes an unfair practice.

정답: B

설명: (ExamPassdump 회원만 볼 수 있음)

문제3
What important action should a health care provider take if the she wants to qualify for funds under the Health Information Technology for Economic and Clinical Health Act (HITECH)?

A. Send health information and appointment reminders to patients electronically

B. Make electronic health records (EHRs) part of regular care

C. Keep electronic updates about the Health Insurance Portability and Accountability Act

D. Bill the majority of patients electronically for their health care

정답: B

설명: (ExamPassdump 회원만 볼 수 있음)

문제4
SCENARIO
Please use the following to answer the next question:
Miraculous Healthcare is a large medical practice with multiple locations in California and Nevada. Miraculous normally treats patients in person, but has recently decided to start offering telehealth appointments, where patients can have virtual appointments with on-site doctors via a phone app.
For this new initiative, Miraculous is considering a product built by MedApps, a company that makes quality telehealth apps for healthcare practices and licenses them to be used with the practices' branding. MedApps provides technical support for the app, which it hosts in the cloud.
MedApps also offers an optional benchmarking service for providers who wish to compare their practice to others using the service.
Riya is the Privacy Officer at Miraculous, responsible for the practice's compliance with HIPAA and other applicable laws, and she works with the Miraculous procurement team to get vendor agreements in place. She occasionally assists procurement in vetting vendors and inquiring about their own compliance practices, as well as negotiating the terms of vendor agreements. Riya is currently reviewing the suitability of the MedApps app from a privacy perspective.
Riya has also been asked by the Miraculous Healthcare business operations team to review the MedApps' optional benchmarking service. Of particular concern is the requirement that Miraculous Healthcare upload information about the appointments to a portal hosted by MedApps.
What HIPAA compliance issue would Miraculous have to consider before using the telehealth app?

A. HIPAA would require Miraculous and MedApps to enter into a Business Associate Agreement.

B. HIPAA does not permit in-person appointment data to be hosted in the cloud.

C. HIPAA does not permit healthcare providers to use cloud hosting services.

D. HIPAA would require Miraculous to obtain patient consent before in-person appointment data can be shared with third parties.

정답: A

설명: (ExamPassdump 회원만 볼 수 있음)

문제5
What does the Massachusetts Personal Information Security Regulation require as it relates to encryption of personal information?

A. The encryption of personal information stored in Massachusetts-based companies when stored on portable devices.

B. The encryption of all personal information of Massachusetts residents when stored on portable devices.

C. The encryption of all personal information of Massachusetts residents when all equipment is located in Massachusetts.

D. The encryption of all personal information stored in Massachusetts-based companies when all equipment is located in Massachusetts.

정답: B

설명: (ExamPassdump 회원만 볼 수 있음)

문제6
In 2011, the FTC announced a settlement with Google regarding its social networking service Google Buzz. The FTC alleged that in the process of launching the service, the company did all of the following EXCEPT?

A. Failed to employ sufficient security safeguards.

B. Violated its own privacy policies.

C. Failed to comply with Safe Harbor principles.

D. Engaged in deceptive trade practices.

정답: A

설명: (ExamPassdump 회원만 볼 수 있음)

문제7
If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

A. Enters a contract with the organization that states the third party will process data according to the consent agreement

B. Notifies the organization if it can no longer meet its requirements for proper data handling

C. Provides the same level of privacy protection as the organization

D. Uses the transferred data for limited purposes

정답: A

설명: (ExamPassdump 회원만 볼 수 있음)

문제8
Which law provides employee benefits, but often mandates the collection of medical information?

A. The Employee Medical Security Act.

B. The Occupational Safety and Health Act.

C. The Americans with Disabilities Act.

D. The Family and Medical Leave Act.

정답: D

설명: (ExamPassdump 회원만 볼 수 있음)

문제9
A software company wants to use web scraping to collect personal data from professional networking websites in order to train an artificial intelligence program to evaluate Job applications. The company has identified several actions for limiting their potential legal liability regarding affected data subjects and professional networking websites. Which of the following would be the least effective action for helping them do this?

A. Following the terms of use posted on professional networking websites that are scraped.

B. Decertifying the scraped data before selling it to any third parties.

C. Adding a notice to the company website's terms of use disclosing the use of web scraping

D. Limiting the amount of the personally identifiable information they collect

정답: C

설명: (ExamPassdump 회원만 볼 수 있음)

문제10
Which action is prohibited under the Electronic Communications Privacy Act of 1986?

A. Intercepting electronic communications and unauthorized access to stored communications

B. Accessing stored communications with the consent of the sender or recipient of the message

C. Monitoring all employee telephone calls

D. Monitoring employee telephone calls of a personal nature

정답: A

설명: (ExamPassdump 회원만 볼 수 있음)

문제11
Which of the following definitions best defines privacy as cited in the text and related to privacy law?

A. The ability of an individual to not be observed or disturbed by other people.

B. The desire of people to be free from surveillance by the government or undue public attention while residing on their personal property.

C. The desire of people to freely choose the circumstances and the degree which individuals will expose their attitudes and behavior to others.

D. The right of an individual or group to seclude themselves from other individuals or organizations.

정답: C

설명: (ExamPassdump 회원만 볼 수 있음)

문제12
More than half of U.S. states require telemarketers to?

A. Provide written contracts for customer transactions

B. Identify themselves at the beginning of a call

C. Obtain written consent from potential customers

D. Register with the state before conducting business

정답: D

설명: (ExamPassdump 회원만 볼 수 있음)

최신IAPP Certified Information Privacy Professional/United States (CIPP/US) - CIPP-US무료샘플문제

자격증의 중요성:

ExamPassdump 제품의 가치:

무료샘플 받아보기:

완벽한 서비스 제공: