ExamGecko
Home Home / IAPP / CIPT

IAPP CIPT Practice Test - Questions Answers, Page 7

Question list
Search
Search

Related questions




SCENARIO Please use the following to answer the next questions: Your company is launching a new track and trace health app during the outbreak of a virus pandemic in the US. The developers claim the app is based on privacy by design because personal data collected was considered to ensure only necessary data is captured, users are presented with a privacy notice, and they are asked to give consent before data is shared. Users can update their consent after logging into an account, through a dedicated privacy and consent hub. This is accessible through the 'Settings' icon from any app page, then clicking 'My Preferences', and selecting 'Information Sharing and Consent' where the following choices are displayed: • "I consent to receive notifications and infection alerts"; • "I consent to receive information on additional features or services, and new products"; • "I consent to sharing only my risk result and location information, for exposure and contact tracing purposes"; • "I consent to share my data for medical research purposes"; and • "I consent to share my data with healthcare providers affiliated to the company". For each choice, an ON* or OFF tab is available The default setting is ON for all Users purchase a virus screening service for USS29 99 for themselves or others using the app The virus screening service works as follows: • Step 1 A photo of the user's face is taken. • Step 2 The user measures their temperature and adds the reading in the app • Step 3 The user is asked to read sentences so that a voice analysis can detect symptoms • Step 4 The user is asked to answer questions on known symptoms • Step 5 The user can input information on family members (name date of birth, citizenship, home address, phone number, email and relationship).) The results are displayed as one of the following risk status "Low. "Medium" or "High" if the user is deemed at "Medium " or "High" risk an alert may be sent to other users and the user is Invited to seek a medical consultation and diagnostic from a healthcare provider. A user's risk status also feeds a world map for contact tracing purposes, where users are able to check if they have been or are in dose proximity of an infected person If a user has come in contact with another individual classified as "medium' or 'high' risk an instant notification also alerts the user of this. The app collects location trails of every user to monitor locations visited by an infected individual Location is collected using the phone's GPS functionary, whether the app is in use or not however, the exact location of the user is "blurred' for privacy reasons Users can only see on the map circles Which of the following is likely to be the most important issue with the choices presented in the 'Information Sharing and Consent' pages?







What is the main reason the Do Not Track (DNT) header is not acknowledged by more companies?

A.

Most web browsers incorporate the DNT feature.

A.

Most web browsers incorporate the DNT feature.

Answers
B.

The financial penalties for violating DNT guidelines are too high.

B.

The financial penalties for violating DNT guidelines are too high.

Answers
C.

There is a lack of consensus about what the DNT header should mean.

C.

There is a lack of consensus about what the DNT header should mean.

Answers
D.

It has been difficult to solve the technological challenges surrounding DNT.

D.

It has been difficult to solve the technological challenges surrounding DNT.

Answers
Suggested answer: C

Explanation:

Reference: https://en.wikipedia.org/wiki/Do_Not_Track

Why is first-party web tracking very difficult to prevent?

A.

The available tools to block tracking would break most sites' functionality.

A.

The available tools to block tracking would break most sites' functionality.

Answers
B.

Consumers enjoy the many benefits they receive from targeted advertising.

B.

Consumers enjoy the many benefits they receive from targeted advertising.

Answers
C.

Regulatory frameworks are not concerned with web tracking.

C.

Regulatory frameworks are not concerned with web tracking.

Answers
D.

Most browsers do not support automatic blocking.

D.

Most browsers do not support automatic blocking.

Answers
Suggested answer: D

Explanation:

Reference: https://www.opentracker.net/article/third-party-cookies-vs-first-party-cookies

During a transport layer security (TLS) session, what happens immediately after the web browser creates a random PreMasterSecret?

A.

The server decrypts the PremasterSecret.

A.

The server decrypts the PremasterSecret.

Answers
B.

The web browser opens a TLS connection to the PremasterSecret.

B.

The web browser opens a TLS connection to the PremasterSecret.

Answers
C.

The web browser encrypts the PremasterSecret with the server's public key.

C.

The web browser encrypts the PremasterSecret with the server's public key.

Answers
D.

The server and client use the same algorithm to convert the PremasterSecret into an encryption key.

D.

The server and client use the same algorithm to convert the PremasterSecret into an encryption key.

Answers
Suggested answer: C

Explanation:

Reference: https://books.google.com.pk/books?id=OaXise4Bp8C&pg=PA175&lpg=PA175&dq=iapp+During+a+transport+layer+security+(TLS)+session,+what+happens+immediately+after+the+web+browser+creates+a+random+PreMasterSecret&source=bl&ots=zR0RCfnx3c&sig=ACfU3U0bTOeOfPfcoq_Y95SZs6imKKilug&hl=en&sa=X&ved=2ahUKEwjkscDHpcbnAhUJuRoKHU5iC9cQ6AEwCnoECAkQAQ#v=onepage&q=iapp%20During%20a%20transport%20layer%20security%20(TLS)%20session%2C%20what%20happens%20immediately%20after%20the%20web%20browser%20creates%20a%20random%20PreMasterSecret&f=false

What is the main benefit of using a private cloud?

A.

The ability to use a backup system for personal files.

A.

The ability to use a backup system for personal files.

Answers
B.

The ability to outsource data support to a third party.

B.

The ability to outsource data support to a third party.

Answers
C.

The ability to restrict data access to employees and contractors.

C.

The ability to restrict data access to employees and contractors.

Answers
D.

The ability to cut costs for storing, maintaining, and accessing data.

D.

The ability to cut costs for storing, maintaining, and accessing data.

Answers
Suggested answer: C

SCENARIO

You have just been hired by Ancillary.com, a seller of accessories for everything under the sun, including waterproof stickers for pool floats and decorative bands and cases for sunglasses. The company sells cell phone cases, e-cigarette cases, wine spouts, hanging air fresheners for homes and automobiles, book ends, kitchen implements, visors and shields for computer screens, passport holders, gardening tools and lawn ornaments, and catalogs full of health and beauty products. The list seems endless. As the CEO likes to say, Ancillary offers, without doubt, the widest assortment of low-price consumer products from a single company anywhere.

Ancillary's operations are similarly diverse. The company originated with a team of sales consultants selling home and beauty products at small parties in the homes of customers, and this base business is still thriving. However, the company now sells online through retail sites designated for industries and demographics, sites such as "My Cool Ride" for automobile-related products or "Zoomer" for gear aimed toward young adults. The company organization includes a plethora of divisions, units and outrigger operations, as Ancillary has been built along a decentered model rewarding individual initiative and flexibility, while also acquiring key assets. The retail sites seem to all function differently, and you wonder about their compliance with regulations and industry standards.

Providing tech support to these sites is also a challenge, partly due to a variety of logins and authentication protocols.

You have been asked to lead three important new projects at Ancillary:

The first is the personal data management and security component of a multi-faceted initiative to unify the company's culture. For this project, you are considering using a series of third- party servers to provide company data and approved applications to employees.

The second project involves providing point of sales technology for the home sales force, allowing them to move beyond paper checks and manual credit card imprinting.

Finally, you are charged with developing privacy protections for a single web store housing all the company's product lines as well as products from affiliates. This new omnibus site will be known, aptly, as "Under the Sun." The Director of Marketing wants the site not only to sell Ancillary's products, but to link to additional products from other retailers through paid advertisements. You need to brief the executive team of security concerns posed by this approach.

If you are asked to advise on privacy concerns regarding paid advertisements, which is the most important aspect to cover?

A.

Unseen web beacons that combine information on multiple users.

A.

Unseen web beacons that combine information on multiple users.

Answers
B.

Latent keys that trigger malware when an advertisement is selected.

B.

Latent keys that trigger malware when an advertisement is selected.

Answers
C.

Personal information collected by cookies linked to the advertising network.

C.

Personal information collected by cookies linked to the advertising network.

Answers
D.

Sensitive information from Structured Query Language (SQL) commands that may be exposed.

D.

Sensitive information from Structured Query Language (SQL) commands that may be exposed.

Answers
Suggested answer: C

Explanation:

The most important aspect to cover when advising on privacy concerns regarding paid advertisements would be C. Personal information collected by cookies linked to the advertising network. Cookies are small text files that are stored on a user's device by websites and advertising networks. They can be used to track a user's browsing behavior and collect personal information.

This can raise privacy concerns as users may not be aware of the extent of data collection and how their personal information is being used.

SCENARIO

You have just been hired by Ancillary.com, a seller of accessories for everything under the sun, including waterproof stickers for pool floats and decorative bands and cases for sunglasses. The company sells cell phone cases, e-cigarette cases, wine spouts, hanging air fresheners for homes and automobiles, book ends, kitchen implements, visors and shields for computer screens, passport holders, gardening tools and lawn ornaments, and catalogs full of health and beauty products. The list seems endless. As the CEO likes to say, Ancillary offers, without doubt, the widest assortment of low-price consumer products from a single company anywhere.

Ancillary's operations are similarly diverse. The company originated with a team of sales consultants selling home and beauty products at small parties in the homes of customers, and this base business is still thriving. However, the company now sells online through retail sites designated for industries and demographics, sites such as "My Cool Ride" for automobile-related products or "Zoomer" for gear aimed toward young adults. The company organization includes a plethora of divisions, units and outrigger operations, as Ancillary has been built along a decentered model rewarding individual initiative and flexibility, while also acquiring key assets. The retail sites seem to all function differently, and you wonder about their compliance with regulations and industry standards.

Providing tech support to these sites is also a challenge, partly due to a variety of logins and authentication protocols.

You have been asked to lead three important new projects at Ancillary:

The first is the personal data management and security component of a multi-faceted initiative to unify the company's culture. For this project, you are considering using a series of third- party servers to provide company data and approved applications to employees.

The second project involves providing point of sales technology for the home sales force, allowing them to move beyond paper checks and manual credit card imprinting.

Finally, you are charged with developing privacy protections for a single web store housing all the company's product lines as well as products from affiliates. This new omnibus site will be known, aptly, as "Under the Sun." The Director of Marketing wants the site not only to sell Ancillary's products, but to link to additional products from other retailers through paid advertisements. You need to brief the executive team of security concerns posed by this approach.

What technology is under consideration in the first project in this scenario?

A.

Server driven controls.

A.

Server driven controls.

Answers
B.

Cloud computing

B.

Cloud computing

Answers
C.

Data on demand

C.

Data on demand

Answers
D.

MAC filtering

D.

MAC filtering

Answers
Suggested answer: B

Explanation:

The technology under consideration in the first project in this scenario is B. Cloud computing. In the scenario, it is mentioned that the first project involves migrating data and applications to a cloudbased infrastructure.

SCENARIO

You have just been hired by Ancillary.com, a seller of accessories for everything under the sun, including waterproof stickers for pool floats and decorative bands and cases for sunglasses. The company sells cell phone cases, e-cigarette cases, wine spouts, hanging air fresheners for homes and automobiles, book ends, kitchen implements, visors and shields for computer screens, passport holders, gardening tools and lawn ornaments, and catalogs full of health and beauty products. The list seems endless. As the CEO likes to say, Ancillary offers, without doubt, the widest assortment of low-price consumer products from a single company anywhere.

Ancillary's operations are similarly diverse. The company originated with a team of sales consultants selling home and beauty products at small parties in the homes of customers, and this base business is still thriving. However, the company now sells online through retail sites designated for industries and demographics, sites such as "My Cool Ride" for automobile-related products or "Zoomer" for gear aimed toward young adults. The company organization includes a plethora of divisions, units and outrigger operations, as Ancillary has been built along a decentered model rewarding individual initiative and flexibility, while also acquiring key assets. The retail sites seem to all function differently, and you wonder about their compliance with regulations and industry standards.

Providing tech support to these sites is also a challenge, partly due to a variety of logins and authentication protocols.

You have been asked to lead three important new projects at Ancillary:

The first is the personal data management and security component of a multi-faceted initiative to unify the company's culture. For this project, you are considering using a series of third- party servers to provide company data and approved applications to employees.

The second project involves providing point of sales technology for the home sales force, allowing them to move beyond paper checks and manual credit card imprinting.

Finally, you are charged with developing privacy protections for a single web store housing all the company's product lines as well as products from affiliates. This new omnibus site will be known, aptly, as "Under the Sun." The Director of Marketing wants the site not only to sell Ancillary's products, but to link to additional products from other retailers through paid advertisements. You need to brief the executive team of security concerns posed by this approach.

Which should be used to allow the home sales force to accept payments using smartphones?

A.

Field transfer protocol.

A.

Field transfer protocol.

Answers
B.

Cross-current translation.

B.

Cross-current translation.

Answers
C.

Near-field communication

C.

Near-field communication

Answers
D.

Radio Frequency Identification

D.

Radio Frequency Identification

Answers
Suggested answer: C

Explanation:

The technology that should be used to allow the home sales force to accept payments using smartphones is C. Near-field communication (NFC). NFC is a short-range wireless technology that allows devices to exchange data when they are brought close together. This technology is commonly used in contactless payment systems and can be used to enable smartphones to accept payments.

What is the best way to protect privacy on a geographic information system (GIS)?

A.

Limiting the data provided to the system.

A.

Limiting the data provided to the system.

Answers
B.

Using a wireless encryption protocol.

B.

Using a wireless encryption protocol.

Answers
C.

Scrambling location information.

C.

Scrambling location information.

Answers
D.

Using a firewall.

D.

Using a firewall.

Answers
Suggested answer: A

Explanation:

Reference:

https://www.researchgate.net/publication/2873114_Protecting_Personal_Privacy_in_Using_Geographic_Information_Systems

In the realm of artificial intelligence, how has deep learning enabled greater implementation of machine learning?

A.

By using hand-coded classifiers like edge detection filters so that a program can identify where an object starts and stops.

A.

By using hand-coded classifiers like edge detection filters so that a program can identify where an object starts and stops.

Answers
B.

By increasing the size of neural networks and running massive amounts of data through the network to train it.

B.

By increasing the size of neural networks and running massive amounts of data through the network to train it.

Answers
C.

By using algorithmic approaches such as decision tree learning and inductive logic programming.

C.

By using algorithmic approaches such as decision tree learning and inductive logic programming.

Answers
D.

By hand coding software routines with a specific set of instructions to accomplish a task.

D.

By hand coding software routines with a specific set of instructions to accomplish a task.

Answers
Suggested answer: B

Explanation:

Reference: https://towardsdatascience.com/notes-on-artificial-intelligence-ai-machine-learning-mland-deep-learning-dl-for-56e51a2071c2

Which of the following is an example of the privacy risks associated with the Internet of Things (loT)?

A.

A group of hackers infiltrate a power grid and cause a major blackout.

A.

A group of hackers infiltrate a power grid and cause a major blackout.

Answers
B.

An insurance company raises a person's rates based on driving habits gathered from a connected car.

B.

An insurance company raises a person's rates based on driving habits gathered from a connected car.

Answers
C.

A website stores a cookie on a user's hard drive so the website can recognize the user on subsequent visits.

C.

A website stores a cookie on a user's hard drive so the website can recognize the user on subsequent visits.

Answers
D.

A water district fines an individual after a meter reading reveals excess water use during drought conditions.

D.

A water district fines an individual after a meter reading reveals excess water use during drought conditions.

Answers
Suggested answer: B
Total 220 questions
Go to page: of 22