Question 1

One-way hash functions can be used is to?

Options :

A : Verify a password in a secure way.

B : Recover a credit card number at refund

C : Encrypt a document for confidentiality.

D : Secure an end-to-end communication.

Answer: A

Question 2

What must be done to destroy data stored on "write once read many" (WORM) media?

Options :

A : The data must be made inaccessible by encryption.

B : The erase function must be used to remove all data.

C : The media must be physically destroyed.

D : The media must be reformatted.

Answer: C

Question 3

An organization has recently experienced a data breach where large amounts of personal data were compromised. As part of a post-incident review, the privacy technologist wants to analyze available data to understand what vulnerabilities may have contributed to the incident occurring. He learns that a key vulnerability had been flagged by the system but that detective controls were not operating effectively. Which type of web application security risk does this finding most likely point to?

Options :

A : Insecure Design.

B : Misconfiguration.

C : Vulnerable and Outdated Components.

D : Logging and Monitoring Failures.

Answer: D

Question 4

Which of the following does NOT illustrate the `˜respect to user privacy' principle?

Options :

A : Implementing privacy elements within the user interface that facilitate the use of technology by any visually-challenged users.

B : Enabling Data Subject Access Request (DSARs) that provide rights for correction, deletion, amendment and rectification of personal information.

C : Developing a consent management self-service portal that enables the data subjects to review the details of consent provided to an organization.

D : Filing breach notification paperwork with data protection authorities which detail the impact to data subjects.

Answer: D

Question 5

An organization needs to be able to manipulate highly sensitive personal information without revealing the contents of the data to the users. The organization should investigate the use of?

Options :

A : Advanced Encryption Standard (AES)

B : Homomorphic encryption

C : Quantum encryption

D : Pseudonymization

Answer: B

Free CIPT Mock Exam – Practice Online Confidently

Buying Options: