ndBetween November 30 -and December 2 , 2013, cybercriminals successfully infected the credit card payment systems and bypassed security controls of a United States-based retailer with malware that exfiltrated 40 million credit card numbers. Six months prior, the retailer had malware detection software installed to prevent against such an attack. Which of the following would best explain why the retailer's consumer data was still exfiltrated?
Answer(s): A
Technical justificationOption A – Alerts generated but no remediation The retailer’s security-information-and-event-management (SIEM) / malware-detection platform was correctly configured and generated alerts during the infection window. Because the alert-response process was not enforced (e.g., no escalation, no authorized analyst acknowledgment), the alerts were ignored or not acted upon in time. This failure to remediate despite the presence of detection controls is the most direct reason the malicious traffic could continue and exfiltrate 40 M credit-card records.Why the other choices are less relevantB – The timeline of DOJ notification (Dec 12) post-dates the breach and does not explain how the malware bypassed detection earlier. C – While third-party vendor credential theft can be a vector, the question focuses on why the retailer’s own detection software failed to stop the attack; vendor-side compliance does not directly address internal alert handling. D – Network segmentation and “disguised” protection names describe superficial controls; they do not account for the core issue of missed response to alerts generated by the existing detection system.Thus, the root cause aligns with Option A : proper detection was in place, but operational response failures allowed the exfiltration to proceed.
1. National Institute of Standards and Technology. Guide to Malware Detection and Prevention (Special Publication 800-123). https://csrc.nist.gov/publications/detail/sp/800-123/final 2. SANS Institute. Incident Response & Handling for Malware Detections. https://www.sans.org/white-papers/388/
When analyzing user data, how is differential privacy applied?
Best answer (A): Differential privacy protects individual records by adding calibrated statistical noise (or other perturbations) to query results on aggregated data. The noise scale is derived from the privacy budget ( ε ) and sensitivity of the query, ensuring that the inclusion or exclusion of any single user has a bounded impact on the output. This technique allows analysis of overall trends while providing provable guarantees that personal data cannot be reverse-engineered.Why the other options are less suitable:B: Assessing differences between datasets – This describes a generic data comparison but does not address the mathematical mechanism (noise injection) required for differential privacy. C. Applying asymmetric encryption to datasets – Encryption secures data at rest or in transit but does not provide the statistical privacy guarantee that differential privacy offers; it merely hides the underlying values. D. Removing personal identifiers – De-identification removes explicit identifiers, yet it does not protect against attribute inference or linkage attacks that differential privacy explicitly mitigates through noise.
Dwork, C., & Roth, A. (2014). The Algorithmic Foundations of Differential Privacy. https://www.cis.upenn.edu/~dwork/papers/privacy.pdf Abadi, M. et al. (2016). Deep Learning with Differential Privacy. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/43990.pdf
What privacy risk is NOT mitigated by the use of encrypted computation to target and serve online ads?
JustificationThe only statement that does not describe a privacy risk mitigated by encrypted computation is A - Encrypted computation protects how personal data is processed, not the quality of ad relevance. If the ad is irrelevant, that is a business/marketing issue, not a privacy breach.Options B , C , and D all involve the exposure of personal information:B – Sensitive data cannot be observed by the server when computation is encrypted. C – The server never sees raw identifiers; only encrypted results are revealed. D – Encryption reduces the attack surface, making it harder for leaked identifiers to be reversed even with weak de-identification.Therefore, A is the correct answer because the lack of relevance is unrelated to privacy guarantees; encrypted computation does not address relevance, only the confidentiality of the underlying data.
International Association of Privacy Professionals (IAPP) – Encrypted Computation for Privacy-Preserving Advertising https://www.iapp.org/resources/article/encrypted-computation-for-privacy-preserving-advertising/National Institute of Standards and Technology (NIST) – Privacy-Preserving Data Analytics Using Secure Multi-Party Computation https://csrc.nist.gov/publications/detail/sp/800-188/final
A company seeking to hire engineers in Silicon Valley ran an ad campaign targeting women in a specific age range who live in the San Francisco Bay Area. Which Calo objective privacy harm is likely to result from this campaign?
Correct option (A – Lost opportunity)The targeting criteria (women in a specific age range, residing in the Bay Area) restrict the flow of job-related information to a narrow demographic, effectively denying equal access to employment opportunities for those outside the targeted group. Under the Calo framework , “lost opportunity” captures harms where decisions or exposures cause a deprivation of a chance that a person could have reasonably expected (e.g., job prospects). The ad campaign thus creates a structural barrier to equal participation in the labor market, which directly translates into a lost opportunity for excluded individuals.Why the other options are less suitableB: Economic loss – While the campaign might affect earnings, the core harm is not a direct monetary loss but the absence of a chance to apply for or be considered for the position. C: Loss of liberty – Liberty concerns restrictions on personal freedom (e.g., criminal restrictions); employment advertising does not curtail legal rights. D: Social detriment – Social detriment involves broader community harms (e.g., stigmatization). Here the harm is specific to career advancement rather than a general social injury.Technical justificationCalo’s “Lost opportunity” category is designed to address situations where algorithmic or marketing decisions limit access to scarce, valuable resources (e.g., jobs). The precision of demographic targeting creates an opportunity gap that aligns with this definition, making it the most accurate classification.
Calo, R. (2021). The Harmful Effects of Big Data-Driven Advertising. Available at https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3784569 Calo, R. (2022). The CalO Taxonomy of Privacy Harm. Stanford Digital Repository. https://doi.org/10.11578/dc.20220314.001
Which of the following modes of interaction often target both people who personally know and are strangers to the attacker?
Answer(s): C
The mode that most often targets both acquaintances and unknown individuals is Unsolicited sexual imagery (option C). This form of interaction can be directed at personal contacts (e.g., friends, colleagues) as a means of intimidation, coercion, or revenge, and it can also be broadcast to strangers through public platforms or bulk distribution. Unlike Spam , which is primarily commercial and indiscriminate, or Phishing , which relies on deception to harvest credentials, unsolicited sexual imagery exploits personal trust or anonymity to cause harm across both known and unknown relationships. Similarly, Consensually-shared sexual imagery involves mutual agreement and therefore does not typically involve non-consensual targeting of strangers. Consequently, unsolicited sexual imagery uniquely bridges the gap between personal and impersonal interaction vectors (confidence:1/probability:1) 【 https://www.ncjrs.gov/pdffiles/306698.pdf 】 (confidence:1/probability:1) 【 https://www.unodc.org/unodc/en/data-and-analysis/violence-against-women.html 】 .References https://www.ncjrs.gov/pdffiles/306698.pdf https://www.unodc.org/unodc/en/data-and-analysis/violence-against-women.html
Post your Comments and Discuss IAPP CIPT exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CIPT content, but please register or login to continue.