CIPP Study guide questions and answers rated A+

CIPP Study guide questions and answers rated A+ Data confidentiality, Data Availability, and what other attribute comprise the three key attributes of information auditing and monitoring? Data retention. Data security. Data consistency. Data integrity. Data integrity. What is a first-party cookie? A cookie that is set to expire at some point in the future. A cookie that only uses a persistent variation when justified. A cookie that is set and read by the web server hosting the website the user is visiting. A cookie that operates as a tag and records an end users visit to a particular webpages. A cookie that is set and read by the web server hosting the website the user is visiting. All of the following are considered acceptable methods for U.S.-based multinational transportation companies to achieve compliance with the EU Data Protection Directive except Safe Harbor. Model contracts. Binding corporate rules. Global consent. Global consent. Which condition must be met to satisfy the Right to Financial Privacy Act requirements for disclosure of individual records by financial institutions? There is an appropriate judicial subpoena. The financial records are reasonably described. The customer authorizes access. There is a qualified search warrant. The financial records are reasonably described. All of the following are considered acceptable reasons for sharing records of U.S. employees with third parties without obtaining the consent of the employees except determining legal standing or citizen status. retirement planning. test marketing the company's new products. group insurance underwriting. test marketing the company's new products. According to the EU Data Protection Dirctive, what three elements are essential chracteristics of consent? A freely-given, specific and implied or expressed indication. A freely-given, informed and written indication. A freely-given, written and implied or expressed indication. A freely-given, specific and informed indication. A freely-given, specific and informed indication. Two of the four categories of data protection and privacy law and practices are informational privacy and Health privacy Territorial privacy Financial privacy Electronic privacy Territorial privacy All of the following are valid privacy protection procedures when terminating an employee who has access to sensitive personal information except -demanding that the employee not remove paper and electronic files, and only remove personal effects under direct observation. -reminding the employee of a non-disclosure agreement signed at the time of employment. -removing the employee's access rights to sensitive personal