QUESTION: 13

Which is NOT a suitable action to apply to data when the retention period ends?

Aggregation.
De-identification.
Deletion.
Retagging.

Answer(s): D

Explanation:

Retagging is not a suitable action to apply to data when the retention period ends. Retagging means changing the classification or label of data based on its sensitivity or value. Retagging does not reduce the risk of unauthorized access or disclosure of personal data that is no longer needed by the organization. The other options are suitable actions to apply to data when the retention period ends, as they either remove or anonymize personal data.

Show Answer Next Question

QUESTION: 14

What is the distinguishing feature of asymmetric encryption?

It has a stronger key for encryption than for decryption.
It employs layered encryption using dissimilar methods.
It uses distinct keys for encryption and decryption.
It is designed to cross operating systems.

Answer(s): C

Reference:

https://www.cryptomathic.com/news-events/blog/classification-of-cryptographic-keys- functions-and-properties
The distinguishing feature of asymmetric encryption is that it uses distinct keys for encryption and decryption. Asymmetric encryption, also known as public-key encryption, involves two keys: a public key that can be shared with anyone and used to encrypt messages; and a private key that is kept secret by its owner and used to decrypt messages. The other options are not features of asymmetric encryption.

Show Answer Next Question

QUESTION: 15

What is the most important requirement to fulfill when transferring data out of an organization?

Ensuring the organization sending the data controls how the data is tagged by the receiver.
Ensuring the organization receiving the data performs a privacy impact assessment.
Ensuring the commitments made to the data owner are followed.
Extending the data retention schedule as needed.

Answer(s): C

Explanation:

The most important requirement to fulfill when transferring data out of an organization is ensuring the commitments made to the data owner are followed. The data owner is the person who has provided their personal data to an organization for a specific purpose or consented to its collection.
When transferring data out of an organization, such as sharing it with another entity or moving it across borders, it is essential that the organization respects the rights and expectations of the data owner and complies with any applicable laws or regulations. The other options are not requirements for transferring data out of an organization, but rather possible measures or considerations that may be relevant depending on the context or nature of the transfer.

Show Answer Next Question

QUESTION: 16

Which activity would best support the principle of data quality?

Providing notice to the data subject regarding any change in the purpose for collecting such data.
Ensuring that the number of teams processing personal information is limited.
Delivering information in a format that the data subject understands.
Ensuring that information remains accurate.

Answer(s): D

Reference:

https://iapp.org/resources/article/fair-information-practices/ The principle of data quality states that personal data should be relevant to the purposes for which they are to be used and, to the extent necessary for those purposes, should be accurate, complete, and up to date. Therefore, ensuring that information remains accurate is an activity that would best support this principle. The other options are not directly related to the principle of data quality, but rather to other principles such as purpose specification, security safeguards, or openness.

Show Answer Next Question

Free IAPP CIPT Exam Braindumps (page: 6)

QUESTION: 13

Explanation:

QUESTION: 14

Reference:

QUESTION: 15

Explanation:

QUESTION: 16

Reference:

CIPT Exam Discussions & Posts