Question 1

What are the categories of risk treatment?

Options :

A : Risk avoidance, risk transfer, risk mitigation, and risk acceptance

B : Risk avoidance, risk treatment, risk mitigation, and risk acceptance

C : Risk avoidance, risk reduction, risk transfer, risk mitigation, and risk acceptance

D : Risk avoidance, risk transfer, and risk mitigation

Answer: B

Question 2

Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

Options :

A : It eliminates cryptographic key collision.

B : It minimizes the risk if the cryptographic key is compromised.

C : It is more practical and efficient to use a single cryptographic key.

D : Each process can only be supported by its own unique key management process.

Answer: C

Question 3

Why is it important for users of corporate laptops to use VPN when communicating on open Wi-Fi hot spots?

Options :

A :

Privacy laws require that corporate data be encrypted in transit.

B : Traffic on open Wi-Fi networks is not encrypted.

C : A VPN is necessary to reach an internal corporate network.

D : VPNs protect stored data on public networks.

Answer: B

Question 4

Program responsibilities over the activities of managing data subject requests lie with:

Options :

A :

The chief privacy officer

B : The chief marketing officer

C : Customer support

D : The chief information security officer

Answer: A

Question 5

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Options :

A : For the purpose of medical research

B : A forthcoming campaign to win back customers

C : A required retention period due to regulations

D : Ease of onboarding when the customer returns

Answer: C