Question 1

Which of the following best describes a network threat model and its uses?

Options :

A : It is used in software development to detect programming errors

B : It is a risk-based model used to calculate the probabilities of risks identified during vulnerability tests

C : It helps assess the probability, the potential harm, and the priority of attacks to help minimize or eradicate the threats

D : It combines the results of vulnerability and penetration tests to provide useful insights into the network-s overall threat and security posture

Answer: C

Question 2

An EU marketing company is planning to make use of personal data captured to make automated decisions based on profiling. In some cases, processing and automated decisions may have a legal effect on individuals, such as credit worthiness.

When evaluating the implementation of systems making automated decisions, in which situation would the company have to accommodate an individual's right NOT to be subject to such processing to ensure compliance under the General Data Protection Regulation (GDPR)?

Options :

A : When an individual-s legal status or rights are not affected by the decision.

B : When there is no human intervention or influence in the decision-making process.

C : When the individual has given explicit consent to such processing and suitable safeguards exist.

D : When the decision is necessary for entering into a contract and the individual can contest the decision.

Answer: D

Question 3

What is the most effective first step to take to operationalize Privacy by Design principles in new product development and projects?

Options :

A : Implementing a mandatory privacy review and legal approval process.

B : Obtain leadership buy-in for a mandatory privacy review and approval process.

C : Set up an online Privacy Impact Assessment tool to facilitate Privacy by Design compliance.

D : Conduct annual Privacy by Design training and refreshers for all impacted personnel.

Answer: B

Question 4

One-way hash functions can be used is to?

Options :

A : Verify a password in a secure way.

B : Recover a credit card number at refund

C : Encrypt a document for confidentiality.

D : Secure an end-to-end communication.

Answer: A

Question 5

What is an Access Control List?

Options :

A : A list of steps necessary for an individual to access a resource.

B : A list that indicates the type of permission granted to each individual.

C : A list showing the resources that an individual has permission to access.

D : A list of individuals who have had their access privileges to a resource revoked.

Answer: B

Confidently Practice Online with Free CIPT Exam Cram

Buying Options: