Free IAPP CIPP-US Exam Questions
Try our Free Demo Practice Tests for Comprehensive CIPP-US Exam Preparation
-
IAPP CIPP-US Exam Questions
-
Provided By: IAPP
- Exam: Certified Information Privacy Professional/United States (CIPP/US)
- Certification: IAPP Certification Programs
-
Total Questions: 201
-
Updated On: Feb 19, 2025
-
Rated: 4.9 |
-
Online Users: 402
-
Question 1
-
What privacy concept grants a consumer the right to view and correct errors on his or her credit report?
Answer: B
-
What privacy concept grants a consumer the right to view and correct errors on his or her credit report?
-
Question 2
-
What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?
Answer: A
-
What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?
-
Question 3
-
When does the Telemarketing Sales Rule require an entity to share a do-not-call request across its
organization?
Answer: C
-
When does the Telemarketing Sales Rule require an entity to share a do-not-call request across its
organization?
-
Question 4
-
SCENARIOPlease use the following to answer the next question:Jane is a U.S. citizen and a senior software engineer at California-based Jones Labs, a major software supplierto the U.S. Department of Defense and other U.S. federal agencies. Jane's manager, Patrick, is a Frenchcitizen who has been living in California for over a decade. Patrick has recently begun to suspect that Jane isan insider secretly transmitting trade secrets to foreign intelligence. Unbeknownst to Patrick, the FBI hasalready received a hint from anonymous whistleblower, and jointly with the National Security Agency isinvestigating Jane's possible implication in a sophisticated foreign espionage campaign.Ever since the pandemic, Jane has been working from home. To complete her daily tasks she uses hercorporate laptop, which after each login conspicuously provides notice that the equipment belongs to JonesLabs and may be monitored according to the enacted privacy policy and employment handbook. Jane also hasa corporate mobile phone that she uses strictly for business, the terms of which are defined in her employmentcontract and elaborated upon in her employee handbook. Both the privacy policy and the employee handbookare revised annually by a reputable California law firm specializing in privacy law. Jane also has a personaliPhone that she uses for private purposes only.Jones Labs has its primary data center in San Francisco, which is managed internally by Jones Labs engineers.The secondary data center, managed by Amazon AWS, is physically located in the UK for disaster recoverypurposes. Jones Labs' mobile devices backup is managed by a mid-sized mobile defense company located inDenver, which physically stores the data in Canada to reduce costs. Jones Labs MS Office documents aresecurely stored in a Microsoft Office 365 data center based in Ireland. Manufacturing data of Jones Labs isstored in Taiwan and managed by a local supplier that has no presence in the U.S.When storing Jane's fingerprint for remote authentication. Jones Labs should consider legality issues underwhich of the following?
Answer: C
-
-
Question 5
-
Which of the following would NOT be considered a method of obtaining verifiable parental consent before
collecting, using or disclosing personal information from children under the Children’s Online Privacy Protection
Act (COPPA) of 1998?
Answer: D
-
Which of the following would NOT be considered a method of obtaining verifiable parental consent before
collecting, using or disclosing personal information from children under the Children’s Online Privacy Protection
Act (COPPA) of 1998?