Online Access Free CIPT Practice Test

A solutions architect designs a service so that data of high-risk individuals is deidentified. Which privacy engineering objective does this demonstrate?

• A.Predictability
• B.Manageability
• C.Identifiability
• D.Disassociability

SCENARIO
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephone, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in- house by Clean-Q IT Support. Because of Clean-Q's business model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:

Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation. Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q's traditional supply and demand system that has caused some overlapping bookings.
Ina business strategy session held by senior management recently, Clear-Q invited vendors to present potential solutions to their current operational issues. These vendors included Application developers and Cloud-Q's solution providers, presenting their proposed solutions and platforms.
The Managing Director opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform: A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
* A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
* A resource facing web interface that enables resources to apply and manage their assigned jobs.
* An online payment facility for customers to pay for services.
If Clean-Q were to utilize LeadOps' services, what is a contract clause that may be included in the agreement entered into with LeadOps?

• A.A provision that requires LeadOps to notify Clean-Q of any suspected breaches of information that involves customer or resource information managed on behalf of Clean-Q.
• B.A provision that allows Clean-Q to conduct audits of LeadOps' information processing and information security environment, at LeadOps' cost and at any time that Clean-Q requires.
• C.A provision prescribing technical and organizational controls that LeadOps must implement.
• D.A provision that holds LeadOps liable for a data breach involving Clean-Q's information.

Which privacy engineering objective proposed by the US National Institute of Science and Technology (NIST) decreases privacy risk by ensuring that connections between individuals and their personal data are reduced?

• A.Disassoc lability
• B.Predictability
• C.Minimization
• D.Manageability

Which of the following is a key element typically examined during an IT control review with a focus on privacy?

• A.Uptime and availability of DPIA platform.
• B.Rules and processes for accessing, modifying, and disposing of PH.
• C.Physical security measures in place to protect hardware storing PH.
• D.Encryption algorithm selection that is used to safeguard PH.

Combining multiple pieces of information about an individual to produce a whole that is greater than the sum of its parts is called?

• A.Insecurity.
• B.Exclusion.
• C.Identification.
• D.Aggregation.