IAPP CIPP-C CIPPC Exam Practice Test Instant Access

Question 1

Which action will help a business prove compliance under Canada's Anti-Spam Legislation (CASL)?

ADemonstrating the dissolution of a personal relationship before communication was sent.

BKeeping records of express and implied consent of commercial electronic messages.

CPosting a list of CASL guidelines on a company's website for customers to read.

DProviding an opt-out mechanism.

Answer : B

Question 2

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?

A3 months.

B12 months.

C24 months.

D36 months

Answer : C

Question 3

A private organization called Vision 3072 must verify the information they are collecting is up to date in order to avoid misinformed actions or decisions. Which privacy principle is intended to make sure this verification is happening?

AIntegrity.

BAccuracy.

CAccountability.

DLimiting purposes.

Answer : B

Question 4

Which of the following incidents will require reporting to OPC?

AA sales report with aggregated information that was sent to the wrong person internally.

BA file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

CAn organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

DAs part of a freedom of information request, a nursing home that released an e-mail with everybody's e-mail address in the 'to' section unredacted.

Answer : A

Question 5

What must happen before an individual requester can commence a court application relating to the denial of access to personal information under the control of a federal government institution?

AThe Privacy Commissioner of Canada must have completed an investigation and issued a report.

BThe Privacy Commissioner of Canada must have completed an investigation and found in favor of the requester.

CThe requester must have made a formal Privacy Act request to a government institution for access to personal information.

DThe requester must have lodged a complaint with the Office of the Privacy Commissioner (OPC) within 60 days of having received a response to a formal Privacy Act request.

Answer : A

Question 6

As response to TJX Winners - Homesense, why is "hashing" preferable to storing a personal identifier such as a driver's license number?

AIt scrambles information but can be unscrambled for later use.

BIt automatically puts a lifespan on any identification that is stored.

CIt randomizes all permanent identification within an organized database.

DIt still provides customer identification, but in a form that would not reveal the real number.

Answer : D

Question 7

Work-product information is generally thought of as information about an individual that?

AIs required by an organization to establish an employment relationship.

BIncludes internal investigation files and complaints filed about an employee.

CIncludes intellectual property developed within the scope of an employee's job function.

DIs prepared or collected as part of that individual's responsibilities or activities in connection to their job.

Answer : D

IAPP Certified Information Privacy Professional/ Canada CIPP/C Exam Practice Test