HikeLetter | PMP Training & Certification Online Course | Project Management Learning

Overview

Course Description

Certification Certified Information Privacy Technologist (CIPT)
Provider International Association of Privacy Professionals (IAPP)
Exam identifier CIPT designation; no numeric exam code listed
Exam format Current format and duration: verify with IAPP before booking
Passing score Verify current scoring details with IAPP
Exam fee (USD) Verify current member/non-member price with IAPP
Maintenance IAPP certification maintenance requirements apply; confirm current term and fees

Course Questions

10 Questions

A product team is designing a new service that processes personal information. What should privacy engineering contribute early in the design?

A. Only a privacy notice at launch B. Technical and organizational controls that embed minimization, access control and privacy requirements into the architecture C. A promise that no risk exists D. A final review after deployment

An application collects full birth dates although age bands would meet its business need. Which design choice best supports data minimization?

A. Collect full dates because storage is inexpensive B. Collect only the age band needed for the defined purpose C. Collect all fields now for possible future uses D. Make every field mandatory

A system replaces names with identifiers but retains a separate mapping key. How should the data generally be treated?

A. Always anonymous B. Still personal data when re-identification is possible using the key C. Public data D. Outside privacy controls

A team removes names but leaves rare attributes and detailed timestamps. What should it assess before calling the dataset anonymous?

A. Only whether names are missing B. Singling-out, linkage and re-identification risks in the relevant context C. Only the file extension D. Whether the dataset has more than 10,000 rows

A database contains sensitive personal data. Which control best describes encryption at rest?

A. Hashing every database column without key management B. Encrypting stored data and protecting encryption keys with controlled access and rotation C. Making backups publicly accessible D. Using a password shared by all administrators

A support analyst needs to troubleshoot a single customer's account. Which access design is most appropriate?

A. Grant permanent administrator rights B. Use least privilege with scoped, time-limited access and audit logging C. Share a team-wide password D. Copy the entire database locally

A new mobile app collects location, contacts and health-related information. What should a privacy threat model identify?

A. Only server uptime risks B. Sensitive data flows, misuse cases, trust boundaries, adversaries and possible harms C. Only UI color contrast D. The number of app downloads

A feature will share customer attributes with a new analytics partner. What is the best engineering workflow?

A. Ship first and document later B. Trigger change review for purpose, data flow, recipient, controls and transparency before enabling sharing C. Assume the contract resolves all risks D. Hide the integration from the data map

An engineering diagram shows systems but not where data is sent or who can access it. What is missing?

A. Decorative icons B. Data categories, purposes, recipients, locations, interfaces and access paths C. Only the project logo D. A count of developers

A service stores logs containing user identifiers indefinitely. What is the best technical approach?

A. Keep all logs forever for debugging B. Define retention periods and automate deletion or de-identification, with documented exceptions C. Disable log review D. Allow every engineer to export logs

₹4999.00 ₹1999.00

Enroll Now

CIPT