CIPM EXAM QUESTIONS WITH 100%
CORRECT ANSWERS
This year's conference is only three weeks away, and you have just heard news of a
new initiative supporting it: a smartphone app for attendees. The app will support late
registration, highlight the featured presenta - Answer-56. Develop a metric showing the
number of initiatives launched without consultation and include it in reports,
presentations, and consultation
57. Vendor Due Diligence or Vetting
58. Requiring the vendor to complete a questionnaire assessing International
Organization for Standardization (ISO) 27001 compliance.
59. Passage of new a privacy regulation
60. Ask the vendor for verifiable information about their privacy protections so
weaknesses can be identified
As the director of data protection for Consolidated Records Corporation, you are
justifiably pleased with your accomplishments so far. Your hiring was precipitated by
warnings from regulatory agencies following a series of relatively minor data breaches
that could easily have been worse. However, you have not had a reportable incident for
the three years that you have been with the company. In fact, you consider your
program a model that others in the data storage industry may note in their own program
development.
You started the program at Consolidated from a jumbled mix of policies and procedures
and worked toward coherence across departments and throughout operations. You
were aided along the way by the program's sponsor, the vice president of operations, as
well as by a Privacy Team that started from a clear understanding of the need for
change.
Edufox has hosted an annual convention of users of its famous e-learning software
platform, and over time, it has become a grand event. It fills one of the large downtown
conference hotels and overflows into the others, with several thousand attendees
enjoying three days of presentations, panel discussions and networking. The convention
is the centerpiece of the company's product rollout schedule and a great training
opportunity for current users. The sales force also encourages prospective clients to
attend to get a better sense of the ways in which the system can be customized to meet
diverse needs and understand that when they buy into this system, they are joining a
community that feels like family.
, Initially, your work was greeted with little confidence or enthus - Answer-61. Protect
62. Through targeted curricula designed for specific departments
63. Auditing
64. Privacy by Design
65. Return on investment
66.
What is the main purpose in notifying data subjects of a data breach?
A. To avoid financial penalties and legal liability
B. To enable regulators to understand trends and developments that may shape the law
C. To ensure organizations have accountability for the sufficiency of their security
measures
D. To allow individuals to take any actions required to protect themselves from possible
consequences - Answer-To allow individuals to take any actions required to protect
themselves from possible consequences
Under the General Data Protection Regulation (GDPR), when would a data subject
have the right to require the erasure of his or her data without undue delay?
A. When the data subject is a public authority
B. When the erasure is in the public interest
C. When the processing is carried out by automated means
D. When the data is no longer necessary for its original purpose - Answer-When the
data is no longer necessary for its original purpose
What is one obligation that the General Data Protection Regulation (GDPR) imposes on
data processors?
A. To honor all data access requests from data subjects
B. To inform data subjects about the identity and contact details of the controller
C. To implement appropriate technical and organizational measures that ensure an
appropriate level of security
D. To carry out data protection impact assessments in cases where processing is likely
to result in high risk to the rights and freedoms of individuals - Answer-To implement
appropriate technical and organizational measures that ensure an appropriate level of
security
Please use the following to answer the next question.
Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for
leading the development of the company's flagship product, the Handy Helper. The
Handy Helper is an application that can be used in the home to manage family
calendars, do online shopping, and schedule doctor appointments. After having had a
successful launch in the United States, the Handy Helper is about to be made available
for purchase worldwide.
The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further
CORRECT ANSWERS
This year's conference is only three weeks away, and you have just heard news of a
new initiative supporting it: a smartphone app for attendees. The app will support late
registration, highlight the featured presenta - Answer-56. Develop a metric showing the
number of initiatives launched without consultation and include it in reports,
presentations, and consultation
57. Vendor Due Diligence or Vetting
58. Requiring the vendor to complete a questionnaire assessing International
Organization for Standardization (ISO) 27001 compliance.
59. Passage of new a privacy regulation
60. Ask the vendor for verifiable information about their privacy protections so
weaknesses can be identified
As the director of data protection for Consolidated Records Corporation, you are
justifiably pleased with your accomplishments so far. Your hiring was precipitated by
warnings from regulatory agencies following a series of relatively minor data breaches
that could easily have been worse. However, you have not had a reportable incident for
the three years that you have been with the company. In fact, you consider your
program a model that others in the data storage industry may note in their own program
development.
You started the program at Consolidated from a jumbled mix of policies and procedures
and worked toward coherence across departments and throughout operations. You
were aided along the way by the program's sponsor, the vice president of operations, as
well as by a Privacy Team that started from a clear understanding of the need for
change.
Edufox has hosted an annual convention of users of its famous e-learning software
platform, and over time, it has become a grand event. It fills one of the large downtown
conference hotels and overflows into the others, with several thousand attendees
enjoying three days of presentations, panel discussions and networking. The convention
is the centerpiece of the company's product rollout schedule and a great training
opportunity for current users. The sales force also encourages prospective clients to
attend to get a better sense of the ways in which the system can be customized to meet
diverse needs and understand that when they buy into this system, they are joining a
community that feels like family.
, Initially, your work was greeted with little confidence or enthus - Answer-61. Protect
62. Through targeted curricula designed for specific departments
63. Auditing
64. Privacy by Design
65. Return on investment
66.
What is the main purpose in notifying data subjects of a data breach?
A. To avoid financial penalties and legal liability
B. To enable regulators to understand trends and developments that may shape the law
C. To ensure organizations have accountability for the sufficiency of their security
measures
D. To allow individuals to take any actions required to protect themselves from possible
consequences - Answer-To allow individuals to take any actions required to protect
themselves from possible consequences
Under the General Data Protection Regulation (GDPR), when would a data subject
have the right to require the erasure of his or her data without undue delay?
A. When the data subject is a public authority
B. When the erasure is in the public interest
C. When the processing is carried out by automated means
D. When the data is no longer necessary for its original purpose - Answer-When the
data is no longer necessary for its original purpose
What is one obligation that the General Data Protection Regulation (GDPR) imposes on
data processors?
A. To honor all data access requests from data subjects
B. To inform data subjects about the identity and contact details of the controller
C. To implement appropriate technical and organizational measures that ensure an
appropriate level of security
D. To carry out data protection impact assessments in cases where processing is likely
to result in high risk to the rights and freedoms of individuals - Answer-To implement
appropriate technical and organizational measures that ensure an appropriate level of
security
Please use the following to answer the next question.
Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for
leading the development of the company's flagship product, the Handy Helper. The
Handy Helper is an application that can be used in the home to manage family
calendars, do online shopping, and schedule doctor appointments. After having had a
successful launch in the United States, the Handy Helper is about to be made available
for purchase worldwide.
The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further
