CIPT Exam Questions with Correct Answers

ccess Control Entry - Answer-An element in an access control list (ACL). Each ACE controls, monitors, or records access to an object by a specified user. Access Control List - Answer-A list of access control entries (ACE) that apply to an object. Each ACE controls or monitors access to an object by a specified user. Discretionary access control list (DACL) - Answer-The ACL controls access System access control list (SACL) - Answer-ACL monitors access in a security event log which can comprise part of an audit trail. Accountability - Answer-A fair information practices principle, when personal information is to be transferred to another person or organization, the personal information controller should obtain the consent of the individual /exercise due diligence & take reasonable steps to ensure that the recipient person/organization will protect the information consistently with other fair use principles. Active Data Collection - Answer-When an end user deliberately provides information, typically through the use of web forms, text boxes, check boxes or radio buttons. Passive Data Collection - Answer-Collecting data from a data subject that is unaware of such collection. First-party Collection - Answer-A data subject provides personal data to the collector directly, through a form or survey that is sent to the collector upon the data subject submitting the information Surveillance Collection - Answer-Collection by way of observing the data stream produced by a given data subject without interference in the data subject's activity. Repurposing - Answer-Taking information collected for one purpose and using it for another purpose later on. Third-party Collection - Answer-Transferring data collected to another collector for their use and repurposing. Risk Controls - Answer-Administrative Controls, Technical Controls, & Physical Controls