Online Access Free CIPT Practice Test

An organization must terminate their cloud vendor agreement immediately. What is the most secure way to delete the encrypted data stored in the cloud?

• A.Destroy all encryption keys associated with the data.
• B.Obtain a destruction certificate from the cloud vendor.
• C.Invoke the appropriate deletion clause in the cloud terms and conditions.
• D.Transfer the data to another location.

Which of the following can be used to bypass even the best physical and logical security mechanisms to gain access to a system?

• A.Brute-force attacks.
• B.Phishing emails.
• C.Denial of service.
• D.Social engineering.

SCENARIO
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephone, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in-house by Clean-Q IT Support. Because of Clean-Q's business model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:

Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation. Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q's traditional supply and demand system that has caused some overlapping bookings.
Ina business strategy session held by senior management recently, Clear-Q invited vendors to present potential solutions to their current operational issues. These vendors included Application developers and Cloud-Q's solution providers, presenting their proposed solutions and platforms.
The Managing Director opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform: A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
* A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
* A resource facing web interface that enables resources to apply and manage their assigned jobs.
* An online payment facility for customers to pay for services.
What is a key consideration for assessing external service providers like LeadOps, which will conduct personal information processing operations on Clean-Q's behalf?

• A.Understanding LeadOps' costing model.
• B.Recognizing the value of LeadOps' website holding a verified security certificate.
• C.Obtaining knowledge of LeadOps' information handling practices and information security environment.
• D.Establishing a relationship with the Managing Director of LeadOps.

Which is NOT a suitable method for assuring the quality of data collected by a third-party company?

• A.Validating the company's data collection procedures.
• B.Tracking changes to data through auditing.
• C.Verifying the accuracy of the data by contacting users.
• D.Introducing erroneous data to see if its detected.

What must be done to destroy data stored on "write once read many" (WORM) media?

• A.The media must be reformatted.
• B.The erase function must be used to remove all data.
• C.The media must be physically destroyed.
• D.The data must be made inaccessible by encryption.