CIPT Exam questions with correct answers

Bastion Server Answer A server that has 1 purpose and only contains software to support that purpose. E.g. Printer, email, and database servers are bastion servers. Using bastion servers reduces the number of applications on a server, which minimizes vulnerability. Privacy Impact Assessment (PIA) Answer Checklists or tools to ensure that a personal information system is evaluated for privacy risks and designed with life cycle principles in mind. An effective PIA evaluates the sufficiency of privacy practices and policies with respect to legal, regulatory and industry standards, and maintains consistency between policy and practice. Should be conducted annually, or additionally upon occurrence of any of the following events: -Creation of new product/service -New/updated program for processing data -Merger/acquisition -Creation of new data center -Onboarding of new data -Movement of data to different country -Changes in regulations governing data use Security Policy Principles Answer All security policies should include these EXTERNAL requirements: (1) Corporate - data stored from consumers, partn