CIPT Practice Exam 2026 – 190 Privacy Technology Certification
Questions with Answers & Detailed Rationales, Privacy Engineering,
Data Lifecycle Management, Security Controls, System Design,
Privacy by Design & Technical Compliance
Question 1
A development team is building a mobile health application that collects continuous heart-
rate data. The product owner proposes storing raw sensor readings indefinitely to support
future machine-learning experiments. Which privacy engineering objective is most directly
undermined by this proposal?
A. Predictability
B. Manageability
C. Disassociability
D. Composability
Correct Answer: C
Explanation: Disassociability ensures data is processed without direct linkage to individuals
when linkage is unnecessary; indefinite raw storage increases identifiability risk.
Question 2
A privacy technologist is asked to review a proposed cookie consent banner. The banner
displays an “Accept All” button in a large, high-contrast box while “Manage Preferences”
appears in small gray text. Which category of design concern should the technologist flag?
,A. Insufficient encryption of consent records
B. Asymmetric choice architecture
C. Lack of server-side audit logging
D. Cross-border data transfer violation
Correct Answer: B
Explanation: Asymmetric visual prominence manipulates user choice toward acceptance, a
dark pattern that undermines freely given consent.
Question 3
During a data protection impact assessment for a new employee monitoring tool, the team
identifies that keystroke logging will capture passwords and personal messages. Which risk
treatment strategy is most appropriate at the design stage?
A. Accept the risk because the tool is for security purposes
B. Transfer the risk by purchasing cyber insurance
C. Avoid the risk by eliminating keystroke content capture
D. Mitigate the risk by encrypting the log files
Correct Answer: C
Explanation: Eliminating the invasive collection at the source (avoidance) is superior to
encrypting data that should not be collected at all.
Question 4
A cloud service provider stores customer personal data across multiple regions without
notifying customers of the specific locations. A customer asks where their data resides.
Which foundational privacy principle does this practice most directly challenge?
,A. Collection limitation
B. Openness
C. Data quality
D. Individual participation
Correct Answer: B
Explanation: Openness requires transparency about processing practices, including data
location, enabling individuals to understand how their information is handled.
Question 5
A software architect proposes using a single persistent identifier across all microservices to
simplify debugging. Which privacy risk does this design choice most significantly amplify?
A. Decreased system availability
B. Increased linkability across contexts
C. Reduced encryption key rotation frequency
D. Inability to perform load balancing
Correct Answer: B
Explanation: A universal identifier allows correlation of user activity across otherwise
separate services, creating a comprehensive profile that increases privacy harm.
Question 6
An organization collects email addresses for a newsletter. Six months later, the marketing
team wants to use the same list to train a spam-detection model. Under use limitation
principles, what should the organization do first?
, A. Proceed because email addresses are low-sensitivity data
B. Anonymize the addresses before training
C. Assess whether the new purpose is compatible with the original notice
D. Delete the addresses and collect new ones
Correct Answer: C
Explanation: Use limitation requires evaluating compatibility of secondary purposes with the
purpose specified at collection; training a model is a distinct use.
Question 7
A privacy technologist is implementing role-based access controls (RBAC) in a hospital
system. A nurse needs temporary access to a patient’s record during an emergency but is
not assigned to that patient’s care team. Which principle should guide the exception
process?
A. Separation of duties
B. Least privilege with break-glass access
C. Mandatory access control
D. Discretionary access control
Correct Answer: B
Explanation: Least privilege is preserved through audited break-glass emergency access that
grants temporary elevation only when clinically necessary.
Question 8
A team is designing a system that will process biometric templates for authentication. Which
privacy-enhancing technique best reduces the impact of a database breach?
Questions with Answers & Detailed Rationales, Privacy Engineering,
Data Lifecycle Management, Security Controls, System Design,
Privacy by Design & Technical Compliance
Question 1
A development team is building a mobile health application that collects continuous heart-
rate data. The product owner proposes storing raw sensor readings indefinitely to support
future machine-learning experiments. Which privacy engineering objective is most directly
undermined by this proposal?
A. Predictability
B. Manageability
C. Disassociability
D. Composability
Correct Answer: C
Explanation: Disassociability ensures data is processed without direct linkage to individuals
when linkage is unnecessary; indefinite raw storage increases identifiability risk.
Question 2
A privacy technologist is asked to review a proposed cookie consent banner. The banner
displays an “Accept All” button in a large, high-contrast box while “Manage Preferences”
appears in small gray text. Which category of design concern should the technologist flag?
,A. Insufficient encryption of consent records
B. Asymmetric choice architecture
C. Lack of server-side audit logging
D. Cross-border data transfer violation
Correct Answer: B
Explanation: Asymmetric visual prominence manipulates user choice toward acceptance, a
dark pattern that undermines freely given consent.
Question 3
During a data protection impact assessment for a new employee monitoring tool, the team
identifies that keystroke logging will capture passwords and personal messages. Which risk
treatment strategy is most appropriate at the design stage?
A. Accept the risk because the tool is for security purposes
B. Transfer the risk by purchasing cyber insurance
C. Avoid the risk by eliminating keystroke content capture
D. Mitigate the risk by encrypting the log files
Correct Answer: C
Explanation: Eliminating the invasive collection at the source (avoidance) is superior to
encrypting data that should not be collected at all.
Question 4
A cloud service provider stores customer personal data across multiple regions without
notifying customers of the specific locations. A customer asks where their data resides.
Which foundational privacy principle does this practice most directly challenge?
,A. Collection limitation
B. Openness
C. Data quality
D. Individual participation
Correct Answer: B
Explanation: Openness requires transparency about processing practices, including data
location, enabling individuals to understand how their information is handled.
Question 5
A software architect proposes using a single persistent identifier across all microservices to
simplify debugging. Which privacy risk does this design choice most significantly amplify?
A. Decreased system availability
B. Increased linkability across contexts
C. Reduced encryption key rotation frequency
D. Inability to perform load balancing
Correct Answer: B
Explanation: A universal identifier allows correlation of user activity across otherwise
separate services, creating a comprehensive profile that increases privacy harm.
Question 6
An organization collects email addresses for a newsletter. Six months later, the marketing
team wants to use the same list to train a spam-detection model. Under use limitation
principles, what should the organization do first?
, A. Proceed because email addresses are low-sensitivity data
B. Anonymize the addresses before training
C. Assess whether the new purpose is compatible with the original notice
D. Delete the addresses and collect new ones
Correct Answer: C
Explanation: Use limitation requires evaluating compatibility of secondary purposes with the
purpose specified at collection; training a model is a distinct use.
Question 7
A privacy technologist is implementing role-based access controls (RBAC) in a hospital
system. A nurse needs temporary access to a patient’s record during an emergency but is
not assigned to that patient’s care team. Which principle should guide the exception
process?
A. Separation of duties
B. Least privilege with break-glass access
C. Mandatory access control
D. Discretionary access control
Correct Answer: B
Explanation: Least privilege is preserved through audited break-glass emergency access that
grants temporary elevation only when clinically necessary.
Question 8
A team is designing a system that will process biometric templates for authentication. Which
privacy-enhancing technique best reduces the impact of a database breach?
