CIPT認證題庫 & CIPT題庫更新資訊NewDumps的CIPT考古題是很好的參考資料。這個考古題決定是你一直在尋找的東西。這是為了考生們特別製作的考試資料。它可以讓你在短時間內充分地準備考試，並且輕鬆地通過考試。如果你不想因為考試浪費太多的時間與精力，那麼NewDumps的CIPT考古題無疑是你最好的選擇。用這個資料你可以提高你的學習效率，從而節省很多時間。 最新的 Information Privacy Technologist CIPT 免費考試真題 (Q95-Q100):問題 #95
SCENARIO - Please use the following to answer the next question:
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephor, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in-house by Clean-Q IT Support. Because of Clean-Q:s business.
model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:
Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation.
Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q:s traditional supply and demand system that has caused some overlapping bookings.
In a business statrategy session held by senior management recently, Clearning invited vendors to present potential solutions to their current operational issues. These vendors includes included Application development and Cloud solution providers, presenting their proposed solution and platforms.
The Managing Direct opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform. A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
A resource facing web interface that enables resources to apply and manage their assigned jobs.
An online payment facility for customer to pay for services.
If Clean-Q were to utilize LeadOps' services, what is a contract clause that may be included in the agreement entered into with LeadOps?
A. A provision that holds LeadOps liable for a data breach involving Clean-Q:s information.
B. A provision prescribing technical and organisational controls that LeadOps must implement.
C. A provision that allows Clean-Q to conduct audits of
LeadOps information processing and information security environment, at LeadOps cost and at any time that Clean-Q requires.
D. A provision that requires LeadOps to notify Clean-Q
of any suspected breaches of information that involves customer or resource information managed on behalf of Clean-Q.
答案：A
問題 #96
What is a mistake organizations make when establishing privacy settings during the development of applications?
A. Providing a user with too much third-party information.
B. Failing to get explicit consent from a user on the use of cookies.
C. Failing to use "Do Not Track" technology.
D. Providing a user with too many choices.
答案：B
解題說明：
Failing to get explicit consent from a user on the use of cookies is a mistake organizations make when establishing privacy settings during the development of applications2. Cookies are small files that store information about users' preferences and behavior on websites2. They can be used for various purposes such as authentication, personalization, analytics, advertising etc.2 However, they can also pose privacy risks as they may collect sensitive or personal information without users' knowledge or consent2. Therefore, organizations should inform users about how they use cookies and obtain their explicit consent before placing cookies on their devices2. This is also required by some laws such as EU's General Data Protection Regulation (GDPR) and ePrivacy Directive2. The other options are not mistakes organizations make when establishing privacy settings during the development of applications.
問題 #97
An organization is launching a new smart speaker to the market. The device will have the capability to play music and provide news and weather updates. Which of the following would be a concern from a privacy perspective?
A. Context of authority.
B. Appropriation.
C. Browser Fingerprinting.
D. Context aware computing.
答案：A
解題說明：
The context of authority is a privacy concern when launching a smart device like a smart speaker. This concept involves ensuring that the device only collects, processes, and stores data within the scope of user consent and legal regulations. Without clear boundaries, there is a risk of unauthorized data collection and potential privacy violations.
問題 #98
What is the main benefit of using a private cloud?
A. The ability to cut costs for storing, maintaining, and accessing data.
B. The ability to outsource data support to a third party.
C. The ability to use a backup system for personal files.
D. The ability to restrict data access to employees and contractors.
答案：C
問題 #99
SCENARIO
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephone, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in-house by Clean-Q IT Support. Because of Clean-Q's business model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:
Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation. Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q's traditional supply and demand system that has caused some overlapping bookings.
Ina business strategy session held by senior management recently, Clear-Q invited vendors to present potential solutions to their current operational issues. These vendors included Application developers and Cloud-Q's solution providers, presenting their proposed solutions and platforms.
The Managing Director opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform: A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
* A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
* A resource facing web interface that enables resources to apply and manage their assigned jobs.
* An online payment facility for customers to pay for services.
Considering that LeadOps will host/process personal information on behalf of Clean-Q remotely, what is an appropriate next step for Clean-Q senior management to assess LeadOps' appropriateness?
A. Obtain a legal opinion from an external law firm on contracts management.
B. Involve the Information Security team to understand in more detail the types of services and solutions LeadOps is proposing.
C. Determine if any Clean-Q competitors currently use LeadOps as a solution.
D. Nothing at this stage as the Managing Director has made a decision.
