CIPS L6M7 Exam Questions Instant Access - No Installation Required

Question 1

Zach is the Head of Procurement at a super secret military base. He does not want anyone outside of the base to know what he is procuring or which suppliers he uses as this information could be critical to national defence. He is aware that cyber criminals may be interested in stealing this information so he has decided to disconnect critical machines and systems from the internet. What is this approach to data security known as?

AUnsyncing

BNon-repudiation

CFiltering

DAir-gapping

Answer : D

This is air-gapping. Air-gapping is when you disconnect from an outside network such as the internet. P.171

Domain: 3.1

Question 2

GDPR (General Data Protection Regulations) were created by which International Body?

AUN

BOECD

CEuropean Court of Justice

DEU

Answer : D

The GDPR was established by the European Union to regulate data protection and privacy. (P.79)

Question 3

Alberto is a member of the IT department and has recently completed an audit at his organisation, which employs over 200 members of staff. He has found evidence of ghost employees. What does this mean, and what should he do?

AA ghost employee is someone who has never existed. He does not need to act as there is no cyber threat.

BA ghost employee is a fake entry someone has created on the HR system. This should be investigated, and the person who entered the data should be disciplined.

CA ghost employee is someone who has left the organisation under suspicious circumstances. An investigation should be launched into why.

DA ghost employee is someone who has left the organisation but whose IT accounts remain active. These accounts should be closed down.

Answer : D

A ghost employee is a former employee whose IT accounts remain active after they have left. These accounts are vulnerable to hacking, as they are often overlooked in security measures. (P.178)

Question 4

It is important for data to be quality controlled. One important aspect of this is for data to be contemporaneous.

What does this mean?

AIt is up-to-date

BIt refers to current events

CThe data was recorded at the time it happened

DThe data is preserved in its original form

Answer : C

Contemporaneous data means that the information was recorded at the exact time the event occurred. This is critical to avoid errors caused by later memory lapses. For example, a nurse administering medication should record the details immediately to avoid any potential mistakes.

Question 5

Alicia is aware of the dangers of IT hacking and has therefore created a risk assessment to assess how susceptible her business is to this threat. In her risk assessment, she has considered her employees and suppliers. Is this the correct thing to do?

AYes - employees are most likely to be targeted by hackers

BYes - a risk assessment will protect Alicia's company from cyber threats

CNo - Alicia should also consider risks throughout the supply chain

DNo - the risk assessment should be completed by a third party

Answer : C

While it is important to consider employees and suppliers, cybersecurity risks can exist at various points in the supply chain. Alicia needs to assess potential threats at every stage. A risk assessment alone does not protect against threats (Option B is incorrect), and there is no indication that a third party must complete the assessment (Option D). (P.154)

Question 6

Which of the following measures prevents access to a system?

AFirewalls and authentication

BFirewalls and encryption

CAuthentication and antivirus

DAntivirus and encryption

Answer : A

Firewalls and authentication prevent unauthorized access to a system. Antivirus and encryption focus on preventing data corruption rather than access control. (P.184)

Question 7

Which of the following approaches to cyber security takes a bottom-up approach to assessing vulnerabilities meticulously item by item?

Asystem approach

Btechnology approach

Celementary approach

Dcomponent approach

Answer : D

This is the component approach - it looks at each individual component (each part of the IT system) in turn to check its okay. When a component is not directly controlled by the organisation (e.g. something to do with a supplier) this is called a dependency. Component approach is a bottom-up approach and is the opposite of the top-down approach which is called the 'system driven approach'. P.179

Domain: 3.2

CIPS Commercial Data Management L6M7 Exam Questions