자격증 발급 기관의 출제 기준 변경에 맞춰 ExamPassdump의 CIPP-US 연습문제는 2026년에도 지속적으로 업데이트됩니다. 228문항 전체를 365일 무료 업데이트와 함께 이용하실 수 있습니다.

IAPP CIPP-US 시험 개요:

IAPP CIPP-US 시험 요강 주제:

IAPP CIPP-US 시험에 대한 질문과 답변 모음

최신 Certified Information Privacy Professional CIPP-US 무료샘플문제

문제 #1

California's SB 1386 was the first law of its type in the United States to do what?

A. Require notification of non-California residents of a breach that occurred in California
B. Require commercial entities to disclose a security data breach concerning personal information about the state's residents
C. Require encryption of sensitive information stored on servers that are Internet connected
D. Require state attorney general enforcement of federal regulations against unfair and deceptive trade practices

문제 #2

Which was NOT one of the five priority areas listed by the Federal Trade Commission in its 2012 report, "Protecting Consumer Privacy in an Era of Rapid Change: Recommendations for Businesses and Policymakers"?

A. Promoting enforceable self-regulatory codes
B. International data transfers
C. Large platform providers
D. Do Not Track

문제 #3

SCENARIO
Please use the following to answer the next question:
Jane is a U.S. citizen and a senior software engineer at California-based Jones Labs, a major software supplier to the U.S. Department of Defense and other U.S. federal agencies. Jane's manager, Patrick, is a French citizen who has been living in California for over a decade. Patrick has recently begun to suspect that Jane is an insider secretly transmitting trade secrets to foreign intelligence. Unbeknownst to Patrick, the FBI has already received a hint from anonymous whistleblower, and jointly with the National Security Agency is investigating Jane's possible implication in a sophisticated foreign espionage campaign.
Ever since the pandemic, Jane has been working from home. To complete her daily tasks she uses her corporate laptop, which after each login conspicuously provides notice that the equipment belongs to Jones Labs and may be monitored according to the enacted privacy policy and employment handbook. Jane also has a corporate mobile phone that she uses strictly for business, the terms of which are defined in her employment contract and elaborated upon in her employee handbook. Both the privacy policy and the employee handbook are revised annually by a reputable California law firm specializing in privacy law. Jane also has a personal iPhone that she uses for private purposes only.
Jones Labs has its primary data center in San Francisco, which is managed internally by Jones Labs engineers. The secondary data center, managed by Amazon AWS, is physically located in the UK for disaster recovery purposes. Jones Labs' mobile devices backup is managed by a mid- sized mobile defense company located in Denver, which physically stores the data in Canada to reduce costs. Jones Labs MS Office documents are securely stored in a Microsoft Office 365 data center based in Ireland. Manufacturing data of Jones Labs is stored in Taiwan and managed by a local supplier that has no presence in the U.S.
Before inspecting any GPS geolocation data from Jane's corporate mobile phone, Patrick should first do what?

A. Obtain prior consent from Jane pursuant to the Telephone Consumer Protection Act
B. Revise emerging workplace privacy best practices with a reputable advocacy organization.
C. Ensure that such activity is permitted under Jane's employment contract or the company's employee privacy policy.
D. Obtain a subpoena from law enforcement, or a court order, directing Jones Labs to collect the GPS geolocation data.

문제 #4

Which of the following best describes the ASIA-Pacific Economic Cooperation (APEC) principles?

A. A baseline of marketers' minimum responsibilities for providing opt-out mechanisms.
B. An international court ruling on personal information held in the commercial sector.
C. A bill of rights for individuals seeking access to their personal information.
D. A code of responsibilities for medical establishments to uphold privacy laws.

문제 #5

Which law provides employee benefits, but often mandates the collection of medical information?

A. The Employee Medical Security Act.
B. The Occupational Safety and Health Act.
C. The Americans with Disabilities Act.
D. The Family and Medical Leave Act.

질문과 대답: