CIPM EXAM QUESTIONS WITH
REVIEWED CORRECT DETAILED
ANSWERS
Which term provide an automated means for organizations to identify, document and
manage their existing risks and controls.
A. Protect
B. Sustain
C. notice
D. Dashboards - Answer-D. Dashboards
Privacy Program Governance include but except:
A. Strategic management
B. Developing and implementing a Privacy Maturity Model
C. Performance measurement
D. Developing and implementing a framework - Answer-D. Developing and
implementing a framework
Privacy ROI defines metrics by:
A. ROI = (Costs - Benefits)/Costs
B. ROI = (Benefits + Costs)/Benefits
C. ROI = (Benefits - Costs)/Costs
D. ROI = (Benefits + Costs)/Costs - Answer-C. ROI = (Benefits - Costs)/Costs
In the privacy operational life cycle which one phase provides privacy management
through the monitoring, auditing and communication aspects of the management
framework
A. Protect
B. Governance
C. Sustain
D. Respond
E. Assess - Answer-C. Sustain
Which privacy model shows fewer tiers in the organizational structure, wider span of
control, and a bottom-to-top flow of decision making and flow of ideas.
A. N/A
B. hybrid model
C. centralized model
D. Local or Decentralized model - Answer-D. Local or Decentralized model
, When we talk about select privacy metrics use the SMART methodology. Every letter in
the SMART includes all of the below except:
A. Specific and/or simple
B. Manageable
C. Auditability
D. Timely
E. Relevant/results-oriented - Answer-C. Auditability
Which privacy model can be more easily integrated in organizations that utilize single-
channel functions with planning and decision making occurring centrally
A. hybrid model
B. Local or Decentralized model
C. centralized model - Answer-C. centralized model
Risk can be tracked based on pre-defined severity categories such as those provided in
the:
A. N/A
B. NIST-800
C. The payment card industry data security standard (PCI DSS)
D. ISO/IEC 27000 series - Answer-A. N/A
About the Data Protection Act of 1998 defines which term give a description of the: A
systematic and independent examination to determine whether activities involving the
processing of personal data are carried out in accordance with an organization's data
protection policies and procedures.
A. refinement
B. collection
C. identification
D. audits - Answer-D. audits
Which one ensures the confidentiality, integrity, availability and privacy of data in all
forms of media:
A. incident management
B. Digital forensics
C. Data security
D. Physical / environmental security - Answer-C. Data security
According to IAPP which is not a main type of governance model?
A. Centralized
REVIEWED CORRECT DETAILED
ANSWERS
Which term provide an automated means for organizations to identify, document and
manage their existing risks and controls.
A. Protect
B. Sustain
C. notice
D. Dashboards - Answer-D. Dashboards
Privacy Program Governance include but except:
A. Strategic management
B. Developing and implementing a Privacy Maturity Model
C. Performance measurement
D. Developing and implementing a framework - Answer-D. Developing and
implementing a framework
Privacy ROI defines metrics by:
A. ROI = (Costs - Benefits)/Costs
B. ROI = (Benefits + Costs)/Benefits
C. ROI = (Benefits - Costs)/Costs
D. ROI = (Benefits + Costs)/Costs - Answer-C. ROI = (Benefits - Costs)/Costs
In the privacy operational life cycle which one phase provides privacy management
through the monitoring, auditing and communication aspects of the management
framework
A. Protect
B. Governance
C. Sustain
D. Respond
E. Assess - Answer-C. Sustain
Which privacy model shows fewer tiers in the organizational structure, wider span of
control, and a bottom-to-top flow of decision making and flow of ideas.
A. N/A
B. hybrid model
C. centralized model
D. Local or Decentralized model - Answer-D. Local or Decentralized model
, When we talk about select privacy metrics use the SMART methodology. Every letter in
the SMART includes all of the below except:
A. Specific and/or simple
B. Manageable
C. Auditability
D. Timely
E. Relevant/results-oriented - Answer-C. Auditability
Which privacy model can be more easily integrated in organizations that utilize single-
channel functions with planning and decision making occurring centrally
A. hybrid model
B. Local or Decentralized model
C. centralized model - Answer-C. centralized model
Risk can be tracked based on pre-defined severity categories such as those provided in
the:
A. N/A
B. NIST-800
C. The payment card industry data security standard (PCI DSS)
D. ISO/IEC 27000 series - Answer-A. N/A
About the Data Protection Act of 1998 defines which term give a description of the: A
systematic and independent examination to determine whether activities involving the
processing of personal data are carried out in accordance with an organization's data
protection policies and procedures.
A. refinement
B. collection
C. identification
D. audits - Answer-D. audits
Which one ensures the confidentiality, integrity, availability and privacy of data in all
forms of media:
A. incident management
B. Digital forensics
C. Data security
D. Physical / environmental security - Answer-C. Data security
According to IAPP which is not a main type of governance model?
A. Centralized
