CIPP-US PDF Dumps Mar 10, 2022 Exam Questions – Valid CIPP-US Dumps
Ultimate CIPP-US Guide to Prepare Free Latest IAPP Practice Tests Dumps
NEW QUESTION 80
Which act violates the Family Educational Rights and Privacy Act of 1974 (FERPA)?
- A. University police provide an arrest report to a student's hometown police, who suspect him of a similar crime
- B. A university posts a public student directory that includes names, hometowns, e-mail addresses, and majors
- C. A K-12 assessment vendor obtains a student's signed essay about her hometown from her school to use as an exemplar for public release
- D. A newspaper prints the names, grade levels, and hometowns of students who made the quarterly honor roll
Answer: C
NEW QUESTION 81
What practice does the USA FREEDOM Act NOT authorize?
- A. The bulk collection of telephone data and internet metadata
- B. An increase in the maximum penalty for material support to terrorism
- C. An extension of the expiration for roving wiretaps
- D. Emergency exceptions that allows the government to target roamers
Answer: D
Explanation:
Explanation/Reference: https://www.rand.org/blog/2015/05/the-usa-freedom-act-the-definition-of-a-compromise.html
NEW QUESTION 82
The rules for "e-discovery" mainly prevent which of the following?
- A. A breach of an organization's data retention program
- B. A conflict between business practice and technological safeguards
- C. The loss of information due to poor data retention practices
- D. The practice of employees using personal devices for work
Answer: C
NEW QUESTION 83
SCENARIO
Please use the following to answer the next QUESTION:
A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer's data handling practices.
The complainant accuses the retailer of improperly disclosing her personal data, without consent, to parties in the United States. Further, the complainant accuses the EU-based retailer of failing to respond to her withdrawal of consent and request for erasure of her personal dat a. Your organization, the US-based startup company, was never informed of this request for erasure by the EU-based retail partner. The supervisory authority investigating the complaint has threatened the suspension of data flows if the parties involved do not cooperate with the investigation. The letter closes with an urgent request: "Please act immediately by identifying all personal data received from our company." This is an important partnership. Company executives know that its biggest fans come from Western Europe; and this retailer is primarily responsible for the startup's rapid market penetration.
As the Company's data privacy leader, you are sensitive to the criticality of the relationship with the retailer.
At this stage of the investigation, what should the data privacy leader review first?
- A. The company's data privacy policies
- B. Available data flow diagrams
- C. Prevailing regulation on this subject
- D. The text of the original complaint
Answer: C
NEW QUESTION 84
What practice does the USA FREEDOM Act NOT authorize?
- A. The bulk collection of telephone data and internet metadata
- B. An increase in the maximum penalty for material support to terrorism
- C. An extension of the expiration for roving wiretaps
- D. Emergency exceptions that allows the government to target roamers
Answer: D
NEW QUESTION 85
Which of the following is NOT a principle found in the APEC Privacy Framework?
- A. Preventing Harm.
- B. Integrity of Personal Information.
- C. Access and Correction.
- D. Privacy by Design.
Answer: D
Explanation:
Explanation/Reference: https://www.google.com/url?
sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiqtJX4tPHvAhUQG-
wKHUoGBgkQFjAHegQIBRAD&url=https%3A%2F%2Fwww.apec.org%2F-%2Fmedia%2FAPEC%
2FPublications%2F2016%2F11%2F2016-CTI-Report-to-Ministers%2FTOC%2FAppendix-17-Updates-to-the- APEC-Privacy-Framework.pdf&usg=AOvVaw1Yysi4Ym_1VaCw1VZiB70a
NEW QUESTION 86
Global Manufacturing Co's Human Resources department recently purchased a new software tool. This tool helps evaluate future candidates for executive roles by scanning emails to see what those candidates say and what is said about them. This provides the HR department with an automated "360 review" that lets them know how the candidate thinks and operates, what their peers and direct reports say about them, and how well they interact with each other.
What is the most important step for the Human Resources Department to take when implementing this new software?
- A. Ensuring that the software contains a privacy notice explaining that employees have no right to privacy as long as they are running this software on organization systems to scan email systems.
- B. Confirming that employees have read and signed the employee handbook where they have been advised that they have no right to privacy as long as they are using the organization's systems, regardless of the protected group or laws enforced by EEOC.
- C. Making sure that the software does not unintentionally discriminate against protected groups.
- D. Providing notice to employees that their emails will be scanned by the software and creating automated profiles.
Answer: C
Explanation:
Explanation/Reference: https://www.beckage.com/tag/artificial-intelligence/
NEW QUESTION 87
SCENARIO
Please use the following to answer the next QUESTION:
Matt went into his son's bedroom one evening and found him stretched out on his bed typing on his laptop. "Doing your network?" Matt asked hopefully.
"No," the boy said. "I'm filling out a survey."
Matt looked over his son's shoulder at his computer screen. "What kind of survey?" "It's asking Questions about my opinions."
"Let me see," Matt said, and began reading the list of Questions that his son had already answered. "It's asking your opinions about the government and citizenship. That's a little odd. You're only ten." Matt wondered how the web link to the survey had ended up in his son's email inbox. Thinking the message might have been sent to his son by mistake he opened it and read it. It had come from an entity called the Leadership Project, and the content and the graphics indicated that it was intended for children. As Matt read further he learned that kids who took the survey were automatically registered in a contest to win the first book in a series about famous leaders.
To Matt, this clearly seemed like a marketing ploy to solicit goods and services to children. He asked his son if he had been prompted to give information about himself in order to take the survey. His son told him he had been asked to give his name, address, telephone number, and date of birth, and to answer Questions about his favorite games and toys.
Matt was concerned. He doubted if it was legal for the marketer to collect information from his son in the way that it was. Then he noticed several other commercial emails from marketers advertising products for children in his son's inbox, and he decided it was time to report the incident to the proper authorities.
How could the marketer have best changed its privacy management program to meet COPPA "Safe Harbor" requirements?
- A. By receiving FTC approval for the content of its emails
- B. By participating in an approved self-regulatory program
- C. By making a COPPA privacy notice available on website
- D. By regularly assessing the security risks to consumer privacy
Answer: A
NEW QUESTION 88
The FTC often negotiates consent decrees with companies found to be in violation of privacy principles. How does this benefit both parties involved?
- A. It avoids potentially harmful publicity.
- B. It simplifies the audit requirements.
- C. It spares the expense of going to trial.
- D. It standardizes the amount of fines.
Answer: A
NEW QUESTION 89
Which law provides employee benefits, but often mandates the collection of medical information?
- A. The Americans with Disabilities Act.
- B. The Family and Medical Leave Act.
- C. The Occupational Safety and Health Act.
- D. The Employee Medical Security Act.
Answer: A
NEW QUESTION 90
SCENARIO
Please use the following to answer the next QUESTION:
A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer's data handling practices.
The complainant accuses the retailer of improperly disclosing her personal data, without consent, to parties in the United States. Further, the complainant accuses the EU-based retailer of failing to respond to her withdrawal of consent and request for erasure of her personal dat a. Your organization, the US-based startup company, was never informed of this request for erasure by the EU-based retail partner. The supervisory authority investigating the complaint has threatened the suspension of data flows if the parties involved do not cooperate with the investigation. The letter closes with an urgent request: "Please act immediately by identifying all personal data received from our company." This is an important partnership. Company executives know that its biggest fans come from Western Europe; and this retailer is primarily responsible for the startup's rapid market penetration.
As the Company's data privacy leader, you are sensitive to the criticality of the relationship with the retailer.
Upon review, the data privacy leader discovers that the Company's documented data inventory is obsolete. What is the data privacy leader's next best source of information to aid the investigation?
- A. Database schemas held by the retailer
- B. Lists of all customers, sorted by country
- C. Interviews with key marketing personnel
- D. Reports on recent purchase histories
Answer: B
NEW QUESTION 91
Which of the following is NOT one of three broad categories of products offered by data brokers, as identified by the U.S. Federal Trade Commission (FTC)?
- A. Research (such as information for understanding consumer trends).
- B. Marketing (such as appending data to customer information that a marketing company already has).
- C. Risk mitigation (such as information that may reduce the risk of fraud).
- D. Location of individuals (such as identifying an individual from partial information).
Answer: D
NEW QUESTION 92
Which authority supervises and enforces laws regarding advertising to children via the Internet?
- A. The Federal Communications Commission
- B. The Department of Homeland Security
- C. The Office for Civil Rights
- D. The Federal Trade Commission
Answer: D
NEW QUESTION 93
What consumer service was the Fair Credit Reporting Act (FCRA) originally intended to provide?
- A. The ability to appeal negative credit-based decisions.
- B. The ability to investigate incidents of identity theft.
- C. The ability to receive reports from multiple credit reporting agencies.
- D. The ability to correct inaccurate credit information.
Answer: B
NEW QUESTION 94
Acme Student Loan Company has developed an artificial intelligence algorithm that determines whether an individual is likely to pay their bill or default. A person who is determined by the algorithm to be more likely to default will receive frequent payment reminder calls, while those who are less likely to default will not receive payment reminders.
Which of the following most accurately reflects the privacy concerns with Acme Student Loan Company using artificial intelligence in this manner?
- A. If the algorithm uses risk factors that impact the automatic decision engine. Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.
- B. If the algorithm uses information about protected classes to make automated decisions, Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.
- C. If the algorithm makes automated decisions based on risk factors and public information, Acme need not determine if the algorithm has a disparate impact on protected classes.
- D. If the algorithm's methodology is disclosed to consumers, then it is acceptable for Acme to have a disparate impact on protected classes.
Answer: C
NEW QUESTION 95
The Family Educational Rights and Privacy Act (FERPA) requires schools to do all of the following EXCEPT?
- A. Verify the identity of students who make requests for access to their records.
- B. Respond to all reasonable student requests regarding explanation of their records.
- C. Obtain student authorization before releasing directory information in their records.
- D. Provide students with access to their records within a specified amount of time.
Answer: D
NEW QUESTION 96
What do the Civil Rights Act, Pregnancy Discrimination Act, Americans with Disabilities Act, Age Discrimination Act, and Equal Pay Act all have in common?
- A. They require employers not to discriminate against certain classes when employees use personal information
- B. They require that employers provide reasonable accommodations to certain classes of employees
- C. They permit employers to use or disclose personal information specifically about employees who are members of certain classes
- D. They afford certain classes of employees' privacy protection by limiting inquiries concerning their personal information
Answer: A
NEW QUESTION 97
......
Conclusion
The CIPP-US exam is into verifying a candidate's knowledge of the US data privacy laws and regulations. It helps to determine how well someone is fit for this field. For the ultimate success, the candidate should use the applicable guides and study course to ensure they pass it in one go.
Passing Key To Getting CIPP-US Certified Exam Engine PDF: https://www.testpassking.com/CIPP-US-exam-testking-pass.html
Get Top-Rated IAPP CIPP-US Exam Dumps Now: https://drive.google.com/open?id=1Z7VxoAkLke27OR-QX0LkrjxQdBLq-9GE