최신IAPP Certified Information Privacy Manager (CIPM) - CIPM무료샘플문제
문제1
When building a data privacy program, what is a good starting point to understand the scope of privacy program needs?
When building a data privacy program, what is a good starting point to understand the scope of privacy program needs?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
As a Data Protection Officer, one of your roles entails monitoring changes in laws and regulations and updating policies accordingly.
How would you most effectively execute this responsibility?
As a Data Protection Officer, one of your roles entails monitoring changes in laws and regulations and updating policies accordingly.
How would you most effectively execute this responsibility?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제3
Which risk-analysis exercise required by GDPR balances the benefits of a specific processing operation involving personal data against the potential for harm to data subjects?
Which risk-analysis exercise required by GDPR balances the benefits of a specific processing operation involving personal data against the potential for harm to data subjects?
정답: C
문제4
SCENARIO
Please use the following to answer the next QUESTION:
Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current users. The sales force also encourages prospective clients to attend to get a better sense of the ways in which the system can be customized to meet diverse needs and understand that when they buy into this system, they are joining a community that feels like family.
This year's conference is only three weeks away, and you have just heard news of a new initiative supporting it: a smartphone app for attendees. The app will support late registration, highlight the featured presentations and provide a mobile version of the conference program. It also links to a restaurant reservation system with the best cuisine in the areas featured. "It's going to be great," the developer, Deidre Hoffman, tells you, "if, that is, we actually get it working!" She laughs nervously but explains that because of the tight time frame she'd been given to build the app, she outsourced the job to a local firm. "It's just three young people," she says, "but they do great work." She describes some of the other apps they have built. When asked how they were selected for this job, Deidre shrugs. "They do good work, so I chose them." Deidre is a terrific employee with a strong track record. That's why she's been charged to deliver this rushed project. You're sure she has the best interests of the company at heart, and you don't doubt that she's under pressure to meet a deadline that cannot be pushed back. However, you have concerns about the app's handling of personal data and its security safeguards. Over lunch in the break room, you start to talk to her about it, but she quickly tries to reassure you, "I'm sure with your help we can fix any security issues if we have to, but I doubt there'll be any. These people build apps for a living, and they know what they're doing. You worry too much, but that's why you're so good at your job!" Which is the best first step in understanding the data security practices of a potential vendor?
SCENARIO
Please use the following to answer the next QUESTION:
Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has become a grand event. It fills one of the large downtown conference hotels and overflows into the others, with several thousand attendees enjoying three days of presentations, panel discussions and networking. The convention is the centerpiece of the company's product rollout schedule and a great training opportunity for current users. The sales force also encourages prospective clients to attend to get a better sense of the ways in which the system can be customized to meet diverse needs and understand that when they buy into this system, they are joining a community that feels like family.
This year's conference is only three weeks away, and you have just heard news of a new initiative supporting it: a smartphone app for attendees. The app will support late registration, highlight the featured presentations and provide a mobile version of the conference program. It also links to a restaurant reservation system with the best cuisine in the areas featured. "It's going to be great," the developer, Deidre Hoffman, tells you, "if, that is, we actually get it working!" She laughs nervously but explains that because of the tight time frame she'd been given to build the app, she outsourced the job to a local firm. "It's just three young people," she says, "but they do great work." She describes some of the other apps they have built. When asked how they were selected for this job, Deidre shrugs. "They do good work, so I chose them." Deidre is a terrific employee with a strong track record. That's why she's been charged to deliver this rushed project. You're sure she has the best interests of the company at heart, and you don't doubt that she's under pressure to meet a deadline that cannot be pushed back. However, you have concerns about the app's handling of personal data and its security safeguards. Over lunch in the break room, you start to talk to her about it, but she quickly tries to reassure you, "I'm sure with your help we can fix any security issues if we have to, but I doubt there'll be any. These people build apps for a living, and they know what they're doing. You worry too much, but that's why you're so good at your job!" Which is the best first step in understanding the data security practices of a potential vendor?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제5
Protection from threats to facilities, systems that process and store electronic copies and IT work/equipment locations best describes which category of security control?
Protection from threats to facilities, systems that process and store electronic copies and IT work/equipment locations best describes which category of security control?
정답: C
문제6
According to the General Data Protection Regulation (GDPR), the requirements of a Data Protection Impact Assessment (DPIA) include that it?
According to the General Data Protection Regulation (GDPR), the requirements of a Data Protection Impact Assessment (DPIA) include that it?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
After an incident, all of the following are potential objectives for improvements to the way an organization handles breach management EXCEPT?
After an incident, all of the following are potential objectives for improvements to the way an organization handles breach management EXCEPT?
정답: D
문제8
(Which of the following should be your first step when conducting an internal privacy audit focused on identifying cross-border data transfers in cloud environments?)
(Which of the following should be your first step when conducting an internal privacy audit focused on identifying cross-border data transfers in cloud environments?)
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제9
What have experts identified as an important trend in privacy program development?
What have experts identified as an important trend in privacy program development?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제10
You are the privacy officer at a university. Recently, the police have contacted you as they suspect that one of your students is using a library computer to commit financial fraud. The police would like your assistance in investigating this individual and are requesting computer logs and usage data of the student.
What Is your first step in responding to the request?
You are the privacy officer at a university. Recently, the police have contacted you as they suspect that one of your students is using a library computer to commit financial fraud. The police would like your assistance in investigating this individual and are requesting computer logs and usage data of the student.
What Is your first step in responding to the request?
정답: B