CIPM Practice Test

CIPM Practice Test practice questions, page 10 of 15, with answer review and explanations.

Question 46

Rationalizing requirements in order to comply with the various privacy requirements required by applicable law and regulation does NOT include which of the following?

  1. Harmonizing shared obligations and privacy rights across varying legislation and/or regulators.
  2. Implementing a solution that significantly addresses shared obligations and privacy rights.
  3. Applying the strictest standard for obligations and privacy rights that doesn't violate privacy laws elsewhere.
  4. Addressing requirements that fall outside the common obligations and rights (outliers) on a case-by-case basis.

Question 47

What is the name for the privacy strategy model that describes delegated decision making?

  1. De-centralized.
  2. De-functionalized.
  3. Hybrid.
  4. Matrix.

Question 48

Which of the following controls does the PCI DSS framework NOT require?

  1. Implement strong asset control protocols.
  2. Implement strong access control measures.
  3. Maintain an information security policy.
  4. Maintain a vulnerability management program.

Question 49

Which of the following privacy frameworks are legally binding?

  1. Binding Corporate Rules (BCRs).
  2. Generally Accepted Privacy Principles (GAPP).
  3. Asia-Pacific Economic Cooperation (APEC) Privacy Framework.
  4. Organization for Economic Co-Operation and Development (OECD) Guidelines.

Question 50

If a privacy professional wants to show that an organization's privacy program is working as intended, the professional should?

  1. Collect feedback from customers about the privacy program.
  2. Carry out a personal data breach tabletop exercise.
  3. Collect and analyze privacy program metrics.
  4. Review privacy policies.