CIPM PRATICE TEST 2 QUESTIONS
WITH 100% CORRECT ANSWERS
When you contact the contracts officer, he tells you that he received a letter in the mail
from a vendor stating that the vendor improperly shared information about your
customers. He called the vendor and confirmed that your company recently surveyed
exactly 2000 individuals about their most recent healthcare experience and sent those
surveys to the vendor to transcribe it into a database, but the vendor forgot to encrypt
the database as promised in the contract. As a result, the vendor has lost control of the
data.
The vendor is extre - Answer--The speed at which you sat down to reflect and
document the incident
-It takes eight hours of emails to come to a decision
-It takes eight hours of emails to come to a decision
-Collecting more personally identifiable information than necessary to provide updates
to affected individuals
- The number of individuals whose information was affected
- The vendor's representative does not have enough experience
- -A health clinic processing its patients' genetic and health data
Please use the following to answer the next question:
As the company's new chief executive officer, Thomas Goddard wants to be known as a
leader in data protection. Goddard recently served as the chief financial officer of
Hoopy.com, a pioneer in online video viewing with millions of users around the world.
Unfortunately, Hoopy is infamous within privacy protection circles for its ethically
Questionable practices, including unauthorized sales of personal data to marketers.
Hoopy also was the target of credit card data theft that made headlines around the
world, as at least two million credit card numbers were thought to have been pilfered
despite the company's claims that "appropriate" data protection safeguards were in
place. The scandal affected the company's business as competitors were quick to
market an increased level of protection while offering similar entertainment and media
content. Within three weeks after - Answer--Institute Privacy by Design principles and
practices across the organization,
-Return on Investment,
-Reviews are conducted to assess the effectiveness of the controls in place,
-Shift attention to privacy for emerging technologies as the company begins to use
them,
-An external audit conducted by a panel of industry experts
-Using limited data in an attempt to support broad conclusions
-Management team priorities
-Collecting more personally identifiable information than necessary to provide updates
to affected individuals
-
, Penny has recently joined Ace Space, a company that sells homeware accessories
online, as its new privacy officer. The company is based in California but thanks to
some great publicity from a social media influencer last year, the company has received
an influx of sales from the EU and has set up a regional office in Ireland to support this
expansion. To become familiar with Ace Space's practices and assess what her privacy
priorities will be, Penny has set up meetings with a number of colleagues to hear about
the work that they have been doing and their compliance efforts.
Penny's colleague in Marketing is excited by the new sales and the company's plans,
but is also concerned that Penny may curtail some of the growth opportunities he has
planned. He tells her "I heard someone in the breakroom talking about some new
privacy laws but I really don't think it affects us. We're just a small company. I mean we
just sell - Answer-- Undertake a tabletop exercise
- Ace Space's content sharing practices on social media
- Analyze the data inventory to map data flows
- Pricing for data security protections
Please use the following to answer the next question:
Paul Daniels, with years of experience as a CEO, is worried about his son Carlton's
successful venture, Gadgo. A technological innovator in the communication industry
that quickly became profitable, Gadgo has moved beyond its startup phase. While it has
retained its vibrant energy, Paul fears that under Carlton's direction, the company may
not be taking its risks or obligations as seriously as it needs to. Paul has hired you, a
privacy Consultant, to assess the company and report to both father and son. "Carlton
won't listen to me," Paul says, "but he may pay attention to an expert."
Gadgo's workplace is a clubhouse for innovation, with games, toys, snacks, espresso
machines, giant fish tanks and even an iguana who regards you with little interest.
Carlton, too, seems bored as he describes to you the company's procedures and
technologies for data protection. It' - Answer-- An internal audit
- Ad hoc
For 15 years, Albert has worked at Treasure Box C a mail order company in the United
States (U.S.) that used to sell decorative candles around the world, but has recently
decided to limit its shipments to customers in the 48 contiguous states. Despite his
years of experience, Albert is often overlooked for managerial positions. His frustration
about not being promoted, coupled with his recent interest in issues of privacy
protection, have motivated Albert to be an agent of positive change.
He will soon interview for a newly advertised position, and during the interview, Albert
plans on making executives aware of lapses in the company's privacy program. He feels
certain he will be rewarded with a promotion for preventing negative consequences
resulting from the company's outdated policies and procedures.
WITH 100% CORRECT ANSWERS
When you contact the contracts officer, he tells you that he received a letter in the mail
from a vendor stating that the vendor improperly shared information about your
customers. He called the vendor and confirmed that your company recently surveyed
exactly 2000 individuals about their most recent healthcare experience and sent those
surveys to the vendor to transcribe it into a database, but the vendor forgot to encrypt
the database as promised in the contract. As a result, the vendor has lost control of the
data.
The vendor is extre - Answer--The speed at which you sat down to reflect and
document the incident
-It takes eight hours of emails to come to a decision
-It takes eight hours of emails to come to a decision
-Collecting more personally identifiable information than necessary to provide updates
to affected individuals
- The number of individuals whose information was affected
- The vendor's representative does not have enough experience
- -A health clinic processing its patients' genetic and health data
Please use the following to answer the next question:
As the company's new chief executive officer, Thomas Goddard wants to be known as a
leader in data protection. Goddard recently served as the chief financial officer of
Hoopy.com, a pioneer in online video viewing with millions of users around the world.
Unfortunately, Hoopy is infamous within privacy protection circles for its ethically
Questionable practices, including unauthorized sales of personal data to marketers.
Hoopy also was the target of credit card data theft that made headlines around the
world, as at least two million credit card numbers were thought to have been pilfered
despite the company's claims that "appropriate" data protection safeguards were in
place. The scandal affected the company's business as competitors were quick to
market an increased level of protection while offering similar entertainment and media
content. Within three weeks after - Answer--Institute Privacy by Design principles and
practices across the organization,
-Return on Investment,
-Reviews are conducted to assess the effectiveness of the controls in place,
-Shift attention to privacy for emerging technologies as the company begins to use
them,
-An external audit conducted by a panel of industry experts
-Using limited data in an attempt to support broad conclusions
-Management team priorities
-Collecting more personally identifiable information than necessary to provide updates
to affected individuals
-
, Penny has recently joined Ace Space, a company that sells homeware accessories
online, as its new privacy officer. The company is based in California but thanks to
some great publicity from a social media influencer last year, the company has received
an influx of sales from the EU and has set up a regional office in Ireland to support this
expansion. To become familiar with Ace Space's practices and assess what her privacy
priorities will be, Penny has set up meetings with a number of colleagues to hear about
the work that they have been doing and their compliance efforts.
Penny's colleague in Marketing is excited by the new sales and the company's plans,
but is also concerned that Penny may curtail some of the growth opportunities he has
planned. He tells her "I heard someone in the breakroom talking about some new
privacy laws but I really don't think it affects us. We're just a small company. I mean we
just sell - Answer-- Undertake a tabletop exercise
- Ace Space's content sharing practices on social media
- Analyze the data inventory to map data flows
- Pricing for data security protections
Please use the following to answer the next question:
Paul Daniels, with years of experience as a CEO, is worried about his son Carlton's
successful venture, Gadgo. A technological innovator in the communication industry
that quickly became profitable, Gadgo has moved beyond its startup phase. While it has
retained its vibrant energy, Paul fears that under Carlton's direction, the company may
not be taking its risks or obligations as seriously as it needs to. Paul has hired you, a
privacy Consultant, to assess the company and report to both father and son. "Carlton
won't listen to me," Paul says, "but he may pay attention to an expert."
Gadgo's workplace is a clubhouse for innovation, with games, toys, snacks, espresso
machines, giant fish tanks and even an iguana who regards you with little interest.
Carlton, too, seems bored as he describes to you the company's procedures and
technologies for data protection. It' - Answer-- An internal audit
- Ad hoc
For 15 years, Albert has worked at Treasure Box C a mail order company in the United
States (U.S.) that used to sell decorative candles around the world, but has recently
decided to limit its shipments to customers in the 48 contiguous states. Despite his
years of experience, Albert is often overlooked for managerial positions. His frustration
about not being promoted, coupled with his recent interest in issues of privacy
protection, have motivated Albert to be an agent of positive change.
He will soon interview for a newly advertised position, and during the interview, Albert
plans on making executives aware of lapses in the company's privacy program. He feels
certain he will be rewarded with a promotion for preventing negative consequences
resulting from the company's outdated policies and procedures.
