CIPT sample questions

Question 1

Which of the following became a foundation for privacy principles and practices of countries and organizations across the globe?

Accepted Answer

The Organization for Economic Co-operation and Development (OECD) Privacy Principles.

Answer

The Personal Data Ordinance.

Answer

The EU Data Protection Directive.

Answer

The Code of Fair Information Practices.

Question 2

Which of the following most embodies the principle of Data Protection by Default?

Accepted Answer

A website that has an opt-in form for marketing emails when registering to download a whitepaper.

Answer

A messaging app for high school students that uses HTTPS to communicate with the server.

Answer

An electronic teddy bear with built-in voice recognition that only responds to its owner's voice.

Answer

An internet forum for victims of domestic violence that allows anonymous posts without registration.

Question 3

How can a hacker gain control of a smartphone to perform remote audio and video surveillance?

Accepted Answer

By installing a roving bug on the phone.

Answer

By performing cross-site scripting.

Answer

By manipulating geographic information systems.

Answer

By accessing a phone's global positioning system satellite signal.

Question 4

Which is NOT a suitable action to apply to data when the retention period ends?

Accepted Answer

Deletion.

Answer

Aggregation.

Answer

De-identification.

Answer

Retagging.

Question 5

Based on the initial assessment and review of the available data flows, which of the following would be the most important privacy risk you should investigate first?

Accepted Answer

Evaluate and review the basis for processing employees’ personal data in the context of the prototype created by WebTracker and approved by the CEO.

Answer

Verify that WebTracker's HR and Payroll systems^hplement the current privacy notice (after the typos are fixed).

Answer

Review the list of subcontractors employed by AmaZure and ensure these are included in the formal agreement with WebTracker.

Answer

Confirm whether the data transfer from London to the USA has been fully approved by AmaZure and the appropriate institutions in the USA and the European Union.

Question 6

In the realm of artificial intelligence, how has deep learning enabled greater implementation of machine learning?

Accepted Answer

By increasing the size of neural networks and running massive amounts of data through the network to train it.

Answer

By using hand-coded classifiers like edge detection filters so that a program can identify where an object starts and stops.

Answer

By using algorithmic approaches such as decision tree learning and inductive logic programming.

Answer

By hand coding software routines with a specific set of instructions to accomplish a task.

Question 7

Why would you recommend that GFC use record encryption rather than disk, file or table encryption?

Accepted Answer

Record encryption is granular, limiting the damage of potential breaches.

Answer

Record encryption is asymmetric, a stronger control measure.

Answer

Record encryption involves tag masking, so its m^adata cannot be decrypted

Answer

Record encryption allows for encryption of personal data only.

Question 8

What technology is under consideration in the first project in this scenario?

Accepted Answer

Server driven controls.

Answer

Cloud computing

Answer

Data on demand

Answer

MAC filtering

Question 9

Granting data subjects the right to have data corrected, amended, or deleted describes?

Accepted Answer

Individual participation

Answer

Use limitation.

Answer

Accountability.

Answer

A security safeguard

Question 10

Which should be used to allow the home sales force to accept payments using smartphones?

Accepted Answer

Near-field communication

Answer

Field transfer protocol.

Answer

Cross-current translation.

Answer

Radio Frequency Identification

CIPT Sample Questions