Passing exam with CIPT latest training materials

SCENARIO
Clean-Q is a company that offers house-hold and office cleaning services. The company receives requests from consumers via their website and telephone, to book cleaning services. Based on the type and size of service, Clean-Q then contracts individuals that are registered on its resource database - currently managed in- house by Clean-Q IT Support. Because of Clean-Q's business model, resources are contracted as needed instead of permanently employed.
The table below indicates some of the personal information Clean-Q requires as part of its business operations:

Clean-Q has an internal employee base of about 30 people. A recent privacy compliance exercise has been conducted to align employee data management and human resource functions with applicable data protection regulation. Therefore, the Clean-Q permanent employee base is not included as part of this scenario.
With an increase in construction work and housing developments, Clean-Q has had an influx of requests for cleaning services. The demand has overwhelmed Clean-Q's traditional supply and demand system that has caused some overlapping bookings.
Ina business strategy session held by senior management recently, Clear-Q invited vendors to present potential solutions to their current operational issues. These vendors included Application developers and Cloud-Q's solution providers, presenting their proposed solutions and platforms.
The Managing Director opted to initiate the process to integrate Clean-Q's operations with a cloud solution (LeadOps) that will provide the following solution one single online platform: A web interface that Clean-Q accesses for the purposes of resource and customer management. This would entail uploading resource and customer information.
* A customer facing web interface that enables customers to register, manage and submit cleaning service requests online.
* A resource facing web interface that enables resources to apply and manage their assigned jobs.
* An online payment facility for customers to pay for services.
What is a key consideration for assessing external service providers like LeadOps, which will conduct personal information processing operations on Clean-Q's behalf?

• A. Understanding LeadOps' costing model.
• B. Establishing a relationship with the Managing Director of LeadOps.
• C. Obtaining knowledge of LeadOps' information handling practices and information security environment.
• D. Recognizing the value of LeadOps' website holding a verified security certificate.

Which of the following is the best method to minimize tracking through the use of cookies?

• A. Use 'private browsing' mode and delete checked files, clear cookies and cache once a day.
• B. Install a commercially available third-party application on top of the browser that is already installed.
• C. Install and use a web browser that is advertised as 'built specifically to safeguard user privacy'.
• D. Manage settings in the browser to limit the use of cookies and remove them once the session completes.

The privacy team has been made aware of a potential customer data breach from a hack on a vendor's network. What is the best next step for managing this incident?

• A. Conduct an impact assessment to evaluate the data that is shared with the vendor and determine if any action is required.
• B. Meet with the Legal and Security teams to determine whether an actual data breach occurred.
• C. Inform all impacted customers and explain that further information gathering is in process.
• D. Identify the territories where the customers reside and report to the appropriate authorities.

What distinguishes a "smart" device?

• A. It can perform multiple data functions simultaneously.
• B. It is programmable by a user without specialized training.
• C. It can reapply access controls stored in its internal memory.
• D. It augments its intelligence with information from the internet.

SCENARIO
Please use the following to answer the next questions:
Your company is launching a new track and trace health app during the outbreak of a virus pandemic in the US. The developers claim the app is based on privacy by design because personal data collected was considered to ensure only necessary data is captured, users are presented with a privacy notice, and they are asked to give consent before data is shared. Users can update their consent after logging into an account, through a dedicated privacy and consent hub. This is accessible through the 'Settings' icon from any app page, then clicking 'My Preferences', and selecting 'Information Sharing and Consent' where the following choices are displayed:
* "I consent to receive notifications and infection alerts";
* "I consent to receive information on additional features or services, and new products";
* "I consent to sharing only my risk result and location information, for exposure and contact tracing purposes";
* "I consent to share my data for medical research purposes"; and
* "I consent to share my data with healthcare providers affiliated to the company".
For each choice, an ON* or OFF tab is available The default setting is ON for all Users purchase a virus screening service for USS29 99 for themselves or others using the app The virus screening service works as follows:
* Step 1 A photo of the user's face is taken.
* Step 2 The user measures their temperature and adds the reading in the app
* Step 3 The user is asked to read sentences so that a voice analysis can detect symptoms
* Step 4 The user is asked to answer questions on known symptoms
* Step 5 The user can input information on family members (name date of birth, citizenship, home address, phone number, email and relationship).) The results are displayed as one of the following risk status "Low. "Medium" or "High" if the user is deemed at "Medium " or "High" risk an alert may be sent to other users and the user is Invited to seek a medical consultation and diagnostic from a healthcare provider.
A user's risk status also feeds a world map for contact tracing purposes, where users are able to check if they have been or are in dose proximity of an infected person If a user has come in contact with another individual classified as "medium' or 'high' risk an instant notification also alerts the user of this. The app collects location trails of every user to monitor locations visited by an infected individual Location is collected using the phone's GPS functionary, whether the app is in use or not however, the exact location of the user is
"blurred' for privacy reasons Users can only see on the map circles
Which technology is best suited for the contact tracing feature of the app1?

• A. Radio-Frequency Identification (RFID)
• B. Deep learning
• C. Near Field Communication (NFC)
• D. Bluetooth