Free IAPP CIPT Exam Dumps Questions & Answers

Which of the following is NOT a factor to consider in FAIR analysis?

• A.  The capability of a threat actor to exploit the analyzed privacy risk.
• B.  The stage of the data life cycle in which the analyzed privacy risk occurs.
• C.  The probability that a threat actor's attempts to exploit a privacy risk might succeed.
• D.  The severity of the harm that might be caused by the privacy risk.

How should the sharing of information within an organization be documented?

• A.  With a disclosure statement.
• B.  With a memorandum of agreement.
• C.  With a data flow diagram.
• D.  With a binding contract.

One-way hash functions can be used to?

• A.  Secure an end-to-end communication.
• B.  Encrypt a document for confidentiality.
• C.  Recover a credit card number at refund.
• D.  Verify a password in a secure way.

An organization must terminate their cloud vendor agreement immediately. What is the most secure way to delete the encrypted data stored in the cloud?

• A.  Destroy all encryption keys associated with the data.
• B.  Invoke the appropriate deletion clause in the cloud terms and conditions.
• C.  Obtain a destruction certificate from the cloud vendor.
• D.  Transfer the data to another location.

SCENARIO
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camera. EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
First and last name
Date of birth (DOB)
Mailing address
Email address
Car VIN number
Car model
License plate
Insurance card number
Photo
Vehicle diagnostics
Geolocation
The app is designed to collect and transmit geolocation data. How can data collection best be limited to the necessary minimum?

• A.  Obtain consent and capture geolocation data at all times after consent is received.
• B.  Allow access and sharing of geolocation data only after an accident occurs.
• C.  Allow user to opt-out geolocation data collection at any time.
• D.  Present a clear and explicit explanation about need for the geolocation data.