Online Access Free CIPT Practice Test

What is the primary purpose of using a key risk indicator (KRI) within a privacy program?

• A.Replace the need to conduct performance impact assessments (PIAs) by implementing automated alerts.
• B.Predict regulatory risk with privacy based on the volume of Data Subject Access Requests (DSARs) submitted.
• C.Determine the confidentiality status of in-scope data via system alerting mechanisms.
• D.Signal early warning signs of potential privacy failures or weaknesses.

Which technique is most likely to facilitate the deletion of every instance of data associated with a deleted user account from every data store held by an organization?

• A.Auditing the code which deletes user accounts.
• B.Building a standardized and documented retention program for user data deletion.
• C.Monitoring each data store for presence of data associated with the deleted user account.
• D.Training engineering teams on the importance of deleting user accounts their associated data from all data stores when requested.

What risk is mitigated when routing meeting video traffic through a company's application servers rather than sending the video traffic directly from one user to another?

• A.The user's IP address is hidden from the other user
• B.The user is assured that stronger authentication methods have been used
• C.The user's identity is protected from the other user
• D.The user is protected against cyberstalking attacks

How does k-anonymity help to protect privacy in micro data sets?

• A.By top-coding all age data above a value of "k."
• B.By ensuring that every record in a set is part of a group of "k" records having similar identifying information.
• C.By adding sufficient noise to the data in order to hide the impact of any one individual.
• D.By switching values between records in order to preserve most statistics while still maintaining privacy.

A privacy technologist reviews a product enhancement for an organization's consumer-facing SaaS solution.
The software engineer working on this enhancement proposed testing it with production data that will be copied to a non-production environment with product-level controls. What is the best next step for the privacy technologist?

• A.Confirm an appropriate data transfer mechanism is in place between the organization and the cloud service provider.
• B.Determine whether the organization's internal privacy policy associated with the SaaS solution considers this use case.
• C.Tell the engineer that the law does not permit testing with personal data.
• D.Check if a penetration test was done on the test environment.