Free IAPP CIPP-US Exam Questions
Try our Free Demo Practice Tests for Comprehensive CIPP-US Exam Preparation
-
IAPP CIPP-US Exam Questions
-
Provided By: IAPP
- Exam: Certified Information Privacy Professional/United States (CIPP/US)
- Certification: IAPP Certification Programs
-
Total Questions: 201
-
Updated On: Sep 28, 2024
-
Rated: 4.9 |
-
Online Users: 402
-
Question 1
-
Under the Fair Credit Reporting Act (FCRA), what must a person who is denied employment based upon his
credit history receive?
Answer: A
-
Under the Fair Credit Reporting Act (FCRA), what must a person who is denied employment based upon his
credit history receive?
-
Question 2
-
SCENARIOPlease use the following to answer the next question:Felicia has spent much of her adult life overseas, and has just recently returned to the U.S. to help her friendCeleste open a jewelry store in California. Felicia, despite being excited at the prospect, has a number ofsecurity concerns, and has only grudgingly accepted the need to hire other employees. In order to guardagainst the loss of valuable merchandise, Felicia wants to carefully screen applicants. With their permission,Felicia would like to run credit checks, administer polygraph tests, and scrutinize videos of interviews. Sheintends to read applicants’ postings on social media, ask questions about drug addiction, and solicit characterreferences. Felicia believes that if potential employees are serious about becoming part of a dynamic newbusiness, they will readily agree to these requirements.Felicia is also in favor of strict employee oversight. In addition to protecting the inventory, she wants to preventmistakes during transactions, which will require video monitoring. She also wants to regularly check thecompany vehicle’s GPS for locations visited by employees. She also believes that employees who use theirown devices for work-related purposes should agree to a certain amount of supervision.Given her high standards, Felicia is skeptical about the proposed location of the store. She has been told thatmany types of background checks are not allowed under California law. Her friend Celeste thinks these worriesare unfounded, as long as applicants verbally agree to the checks and are offered access to the results. Nordoes Celeste share Felicia’s concern about state breach notification laws, which, she claims, would be costly toimplement even on a minor scale. Celeste believes thateven if the business grows a customer database of a few thousand, it’s unlikely that a state agency wouldhassle an honest business if an accidental security incident were to occur.In any case, Celeste feels that all they need is common sense – like remembering to tear up sensitivedocuments before throwing them in the recycling bin. Felicia hopes that she’s right, and that all of her concernswill be put to rest next month when their new business consultant (who is also a privacy professional) arrivesfrom North Carolina.Regarding credit checks of potential employees, Celeste has a misconception regarding what?
Answer: A
-
-
Question 3
-
SCENARIOPlease use the following to answer the next question:Jane is a U.S. citizen and a senior software engineer at California-based Jones Labs, a major software supplierto the U.S. Department of Defense and other U.S. federal agencies. Jane's manager, Patrick, is a Frenchcitizen who has been living in California for over a decade. Patrick has recently begun to suspect that Jane isan insider secretly transmitting trade secrets to foreign intelligence. Unbeknownst to Patrick, the FBI hasalready received a hint from anonymous whistleblower, and jointly with the National Security Agency isinvestigating Jane's possible implication in a sophisticated foreign espionage campaign.Ever since the pandemic, Jane has been working from home. To complete her daily tasks she uses hercorporate laptop, which after each login conspicuously provides notice that the equipment belongs to JonesLabs and may be monitored according to the enacted privacy policy and employment handbook. Jane also hasa corporate mobile phone that she uses strictly for business, the terms of which are defined in her employmentcontract and elaborated upon in her employee handbook. Both the privacy policy and the employee handbookare revised annually by a reputable California law firm specializing in privacy law. Jane also has a personaliPhone that she uses for private purposes only.Jones Labs has its primary data center in San Francisco, which is managed internally by Jones Labs engineers.The secondary data center, managed by Amazon AWS, is physically located in the UK for disaster recoverypurposes. Jones Labs' mobile devices backup is managed by a mid-sized mobile defense company located inDenver, which physically stores the data in Canada to reduce costs. Jones Labs MS Office documents aresecurely stored in a Microsoft Office 365 data center based in Ireland. Manufacturing data of Jones Labs isstored in Taiwan and managed by a local supplier that has no presence in the U.S.When storing Jane's fingerprint for remote authentication. Jones Labs should consider legality issues underwhich of the following?
Answer: C
-
-
Question 4
-
Which of the following describes the most likely risk for a company developing a privacy policy with standards
that are much higher than its competitors?
Answer: A
-
Which of the following describes the most likely risk for a company developing a privacy policy with standards
that are much higher than its competitors?
-
Question 5
-
The Cable Communications Policy Act of 1984 requires which activity?
Answer: C
-
The Cable Communications Policy Act of 1984 requires which activity?