live chatHACKER SAFEにより証明されたサイトは、99.9%以上のハッカー犯罪を防ぎます。

IAPP CIPM問題集

CIPM

試験コード:CIPM

試験名称:Certified Information Privacy Manager (CIPM)

バージョン:V12.75

最近更新時間:2021-06-19

問題と解答:139 Q&As

CIPM 無料でデモをダウンロード:

PDF版 Demo ソフト版 Demo オンライン版 Demo

追加した商品:"PDF版"
価格:¥5999 

無料問題集CIPM 資格取得

質問 1:
What does it mean to "rationalize" data protection requirements?
A. Determine where laws and regulations are redundant in order to eliminate some from requiring compliance
B. Look for overlaps in laws and regulations from which a common solution can be developed
C. Address the less stringent laws and regulations, and inform stakeholders why they are applicable
D. Evaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties
正解:A

質問 2:
SCENARIO
Please use the following to answer the next QUESTION.
Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the development of the company's flagship product, the Handy Helper. The Handy Helper is an application that can be used in the home to manage family calendars, do online shopping, and schedule doctor appointments.
After having had a successful launch in the United States, the Handy Helper is about to be made available for purchase worldwide.
The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly" product suitable for the whole family, including children, but does not provide any further detail or privacy notice. In order to use the application, a family creates a single account, and the primary user has access to all information about the other users. Upon start up, the primary user must check a box consenting to receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be able to use the application.
Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European distributor of Handy Helper when he fielded many Questions about the product from the distributor. Sanjay needed to look more closely at the product in order to be able to answer the Questions as he was not involved in the product development process.
In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.
Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent Omnimedia employees have access to user data under a program called "Eureka." Omnipresent Omnimedia is hoping that at some point in the future, the data will reveal insights that could be used to create a fully automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is considered a long-term goal.
What security controls are missing from the Eureka program?
A. Storage of medical data in the cloud is not permissible under the General Data Protection Regulation (GDPR)
B. Collection of data without a defined purpose might violate the fairness principle
C. Encryption of the data at rest prevents European users from having the right of access and the right of portability of their data
D. Data access is not limited to those who "need to know" for their role
正解:D

質問 3:
The General Data Protection Regulation (GDPR) specifies fines that may be levied against data controllers for certain infringements. Which of the following will be subject to administrative fines of up to 10 000 000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year?
A. Failure to provide the means for a data subject to rectify inaccuracies in personal data
B. Failure to demonstrate that consent was given by the data subject to the processing of their personal data where it is used as the basis for processing
C. Failure to implement technical and organizational measures to ensure data protection is enshrined by design and default
D. Failure to process personal information in a manner compatible with its original purpose
正解:B

質問 4:
SCENARIO
Please use the following to answer the next QUESTION:
As the Director of data protection for Consolidated Records Corporation, you are justifiably pleased with your accomplishments so far. Your hiring was precipitated by warnings from regulatory agencies following a series of relatively minor data breaches that could easily have been worse. However, you have not had a reportable incident for the three years that you have been with the company. In fact, you consider your program a model that others in the data storage industry may note in their own program development.
You started the program at Consolidated from a jumbled mix of policies and procedures and worked toward coherence across departments and throughout operations. You were aided along the way by the program's sponsor, the vice president of operations, as well as by a Privacy Team that started from a clear understanding of the need for change.
Initially, your work was greeted with little confidence or enthusiasm by the company's "old guard" among both the executive team and frontline personnel working with data and interfacing with clients. Through the use of metrics that showed the costs not only of the breaches that had occurred, but also projections of the costs that easily could occur given the current state of operations, you soon had the leaders and key decision-makers largely on your side. Many of the other employees were more resistant, but face-to-face meetings with each department and the development of a baseline privacy training program achieved sufficient "buy-in" to begin putting the proper procedures into place.
Now, privacy protection is an accepted component of all current operations involving personal or protected data and must be part of the end product of any process of technological development. While your approach is not systematic, it is fairly effective.
You are left contemplating:
What must be done to maintain the program and develop it beyond just a data breach prevention program?
How can you build on your success?
What are the next action steps?
What stage of the privacy operational life cycle best describes Consolidated's current privacy program?
A. Respond.
B. Sustain.
C. Assess.
D. Protect.
正解:B

質問 5:
Which is the best way to view an organization's privacy framework?
A. As an aspirational goal that improves the organization
B. As a fixed structure that directs changes in the organization
C. As a living structure that aligns to changes in the organization
D. As an industry benchmark that can apply to many organizations
正解:B

質問 6:
What is the best way to understand the location, use and importance of personal data within an organization?
A. By analyzing the data inventory.
B. By evaluating methods for collecting data.
C. By testing the security of data systems.
D. By interviewing employees tasked with data entry.
正解:B

質問 7:
SCENARIO
Please use the following to answer the next QUESTION:
For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the
48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motivated Albert to be an agent of positive change.
He will soon interview for a newly advertised position, and during the interview, Albert plans on making executives aware of lapses in the company's privacy program. He feels certain he will be rewarded with a promotion for preventing negative consequences resulting from the company's outdated policies and procedures.
For example, Albert has learned about the AICPA (American Institute of Certified Public Accountans)/CICA (Canadian Institute of Chartered Accountants) Privacy Maturity Model (PMM). Albert thinks the model is a useful way to measure Treasure Box's ability to protect personal data. Albert has noticed that Treasure Box fails to meet the requirements of the highest level of maturity of this model; at his interview, Albert will pledge to assist the company with meeting this level in order to provide customers with the most rigorous security available.
Albert does want to show a positive outlook during his interview. He intends to praise the company's commitment to the security of customer and employee personal data against external threats. However, Albert worries about the high turnover rate within the company, particularly in the area of direct phone marketing. He sees many unfamiliar faces every day who are hired to do the marketing, and he often hears complaints in the lunch room regarding long hours and low pay, as well as what seems to be flagrant disregard for company procedures.
In addition, Treasure Box has had two recent security incidents. The company has responded to the incidents with internal audits and updates to security safeguards. However, profits still seem to be affected and anecdotal evidence indicates that many people still harbor mistrust. Albert wants to help the company recover.
He knows there is at least one incident the public in unaware of, although Albert does not know the details. He believes the company's insistence on keeping the incident a secret could be a further detriment to its reputation. One further way that Albert wants to help Treasure Box regain its stature is by creating a toll-free number for customers, as well as a more efficient procedure for responding to customer concerns by postal mail.
In addition to his suggestions for improvement, Albert believes that his knowledge of the company's recent business maneuvers will also impress the interviewers. For example, Albert is aware of the company's intention to acquire a medical supply company in the coming weeks.
With his forward thinking, Albert hopes to convince the managers who will be interviewing him that he is right for the job.
What is one important factor that Albert fails to consider regarding Treasure Box's response to their recent security incident?
A. Who has access to the data
B. What the nature of the data is
C. How data at the company is collected
D. How long data at the company is kept
正解:D

質問 8:
SCENARIO
Please use the following to answer the next QUESTION:
Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last week, a data processing firm used by the company reported that its system may have been hacked, and customer data such as names, addresses, and birthdays may have been compromised. Although the attempt was proven unsuccessful, the scare has prompted several Nationwide Grill executives to Question the company's privacy program at today's meeting.
Alice, a vice president, said that the incident could have opened the door to lawsuits, potentially damaging Nationwide Grill's market position. The Chief Information Officer (CIO), Brendan, tried to assure her that even if there had been an actual breach, the chances of a successful suit against the company were slim. But Alice remained unconvinced.
Spencer - a former CEO and currently a senior advisor - said that he had always warned against the use of contractors for data processing. At the very least, he argued, they should be held contractually liable for telling customers about any security incidents. In his view, Nationwide Grill should not be forced to soil the company name for a problem it did not cause.
One of the business development (BD) executives, Haley, then spoke, imploring everyone to see reason.
"Breaches can happen, despite organizations' best efforts," she remarked. "Reasonable preparedness is key." She reminded everyone of the incident seven years ago when the large grocery chain Tinkerton's had its financial information compromised after a large order of Nationwide Grill frozen dinners. As a long-time BD executive with a solid understanding of Tinkerton's's corporate culture, built up through many years of cultivating relationships, Haley was able to successfully manage the company's incident response.
Spencer replied that acting with reason means allowing security to be handled by the security functions within the company - not BD staff. In a similar way, he said, Human Resources (HR) needs to do a better job training employees to prevent incidents. He pointed out that Nationwide Grill employees are overwhelmed with posters, emails, and memos from both HR and the ethics department related to the company's privacy program. Both the volume and the duplication of information means that it is often ignored altogether.
Spencer said, "The company needs to dedicate itself to its privacy program and set regular in-person trainings for all staff once a month." Alice responded that the suggestion, while well-meaning, is not practical. With many locations, local HR departments need to have flexibility with their training schedules. Silently, Natalia agreed.
Based on the scenario, Nationwide Grill needs to create better employee awareness of the company's privacy program by doing what?
A. Requiring acknowledgment of company memos.
B. Communicating to the staff more often.
C. Varying the modes of communication.
D. Improving inter-departmental cooperation.
正解:A

質問 9:
If an organization maintains a separate ethics office, to whom would its officer typically report to in order to retain the greatest degree of independence?
A. The Human Resources Director.
B. The organization's General Counsel.
C. The Chief Financial Officer.
D. The Board of Directors.
正解:D

一年間無料で問題集をアップデートするサービスを提供します。

弊社の商品をご購入になったことがあるお客様に一年間の無料更新サービスを提供いたします。弊社は毎日問題集が更新されたかどうかを確認しますから、もし更新されたら、弊社は直ちに最新版のCIPM問題集をお客様のメールアドレスに送信いたします。ですから、試験に関連する情報が変わったら、あなたがすぐに知ることができます。弊社はお客様がいつでも最新版のIAPP CIPM学習教材を持っていることを保証します。

弊社は無料でCertified Information Privacy Manager試験のDEMOを提供します。

Pass4Testの試験問題集はPDF版とソフト版があります。PDF版のCIPM問題集は印刷されることができ、ソフト版のCIPM問題集はどのパソコンでも使われることもできます。両方の問題集のデモを無料で提供し、ご購入の前に問題集をよく理解することができます。

簡単で便利な購入方法ご購入を完了するためにわずか2つのステップが必要です。弊社は最速のスピードでお客様のメールボックスに製品をお送りします。あなたはただ電子メールの添付ファイルをダウンロードする必要があります。

領収書について:社名入りの領収書が必要な場合には、メールで社名に記入して頂き送信してください。弊社はPDF版の領収書を提供いたします。

Pass4Test問題集を選ぶ理由は何でしょうか?
 品質保証Pass4Testは試験内容に応じて作り上げられて、正確に試験の内容を捉え、最新の97%のカバー率の問題集を提供することができます。
 一年間の無料アップデートPass4Testは一年間で無料更新サービスを提供することができ、認定試験の合格に大変役に立ちます。もし試験内容が変われば、早速お客様にお知らせします。そして、もし更新版がれば、お客様にお送りいたします。
 全額返金お客様に試験資料を提供してあげ、勉強時間は短くても、合格できることを保証いたします。不合格になる場合は、全額返金することを保証いたします。(全額返金)
 ご購入の前の試用Pass4Testは無料でサンプルを提供することができます。無料サンプルのご利用によってで、もっと自信を持って認定試験に合格することができます。