Free Access APICS.CPIM-8.0.v2026-09-24.q300 Practice Test (Page 45)

Question 216

A potentially life-threatening vulnerability is found in vendor software that is used to manage critical systems.
Which of the following is generally considered the BEST method to disclose the vulnerability from an ethical hacking perspective?

A.Bug bounty disclosure programs because the researcher should get paid for finding the vulnerability

B.Full public disclosure because the vulnerability is serious and the organizations using the software need to know quickly

C.Coordinated disclosure because it compels the vendor to act within a certain time frame

D.Full vendor disclosure because it is the vendor's responsibility to disclose vulnerabilities to its customers

Question 217

An organization has determined that it needs to retain customer records for at least thirty years to discover generational trends in customer behavior. However, relevant local regulation requires that all Personally Identifiable Information (PII) is deleted after expiration of the customer's engagement with the organization, which is usually no longer than one year. How should the data be handled at the expiration of customer engagement at one year?

A.The data should be deleted from the customer website, and archived to a write-once, read-many drive to securely meet the business requirement for analytics.

B.Because the data contains PII, it should be backed up in an encrypted form, with the encryption key securely kept in a Hardware Security Module (HSM), and all access logged and monitored.

C.Since legal and regulatory compliance takes priority over business requirements, the data should be deleted.

D.PII portion of the data should be tokenized or deleted, and the rest of the data stored securely to meet the business requirement for analytics.

Question 218

Which of the following actions best supports a company's strategic focus on delivery speed to improve competitive advantage?

A.Maintaining high-capacity utilization

B.Developing flexible operations

C.Cross-training workers

D.Implementing rapid process improvements

Question 219

Following the setting of an organization's risk appetite by senior management, a risk manager needs to prioritize all identified risks for treatment. Each risk has been scored based on its Annualized Loss Expectancy (ALE). Management has asked for an immediate risk mitigation plan focusing on top risks.
Which is the MOST effective approach for the risk manager to quickly present a proposal to management?

A.Rank all risks based on ALE and select the top 10 risks.

B.Rank all risks based on Single-Loss Expectancy (SLE) and select the top 10 risks.

C.Rank all risks based on ALE and select those that exceed a maximum acceptable threshold derived from the risk appetite.

D.Rank all risks based on their Single-Loss Expectancy (SLE) and select those that exceed a maximum acceptable threshold derived from the risk appetite.

Question 220

An organization needs a firewall that maps packets to connections and uses Transmission Control Protocol
/Internet Protocol (TCP/IP) header fields to keep track of connections. Which type of firewall will be recommended?

A.Packet

B.Stateless

C.Network

D.Stateful

Latest Upload: 109Fortinet.NSE6_FNC_AD-7.6.v2026-09-26.q46; 130PaloAltoNetworks.SSE-Engineer.v2026-09-25.q44; 166Oracle.1z0-071.v2026-09-25.q398; 126Salesforce.Analytics-Con-301.v2026-09-25.q44; 133SAP.C-CR125-2601.v2026-09-24.q28; 282APICS.CPIM-8.0.v2026-09-24.q300; 418ISACA.CISA.v2026-09-24.q827; 147API.API-SIEE.v2026-09-23.q40; 246Cisco.200-301.v2026-09-23.q650; 142NACE.NACE-CIP1-001.v2026-09-23.q35

Question 216

Question 217

Question 218

Question 219

Question 220

Download PDF File