CIPT 試験問題を無料オンラインアクセス

In day to day interactions with technology, consumers are presented with privacy choices. Which of the following best represents the Privacy by Design (PbD) methodology of letting the user choose a non-zero-sum choice?

• A.Displaying the percentage of users that chose a particular option, thus enabling the user to choose the most preferred option.
• B.Using contexts, antecedent events, and other priming concepts to assist the user in making a better privacy choice.
• C.Providing plain-language design choices that elicit privacy-related responses, helping users avoid errors and minimize the negative consequences of errors when they do occur.
• D.Using images, words, and contexts to elicit positive feelings that result in proactive behavior, thus eliminating negativity and biases.

SCENARIO
Please use the following to answer the next question:
Jordan just joined a fitness-tracker start-up based in California, USA, as its first Information Privacy and Security Officer. The company is quickly growing its business but does not sell any of the fitness trackers itself. Instead, it relies on a distribution network of third-party retailers in all major countries. Despite not having any stores, the company has a 78% market share in the EU. It has a website presenting the company and products, and a member section where customers can access their information. Only the email address and physical address need to be provided as part of the registration process in order to customize the site to the user's region and country. There is also a newsletter sent every month to all members featuring fitness tips, nutrition advice, product spotlights from partner companies based on user behavior and preferences.
Jordan says the General Data Protection Regulation (GDPR) does not apply to the company. He says the company is not established in the EU, nor does it have a processor in the region. Furthermore, it does not do any "offering goods or services" in the EU since it does not do any marketing there, nor sell to consumers directly. Jordan argues that it is the customers who chose to buy the products on their own initiative and there is no "offering" from the company.
The fitness trackers incorporate advanced features such as sleep tracking, GPS tracking, heart rate monitoring.
wireless syncing, calorie-counting and step-tracking. The watch must be paired with either a smartphone or a computer in order to collect data on sleep levels, heart rates, etc. All information from the device must be sent to the company's servers in order to be processed, and then the results are sent to the smartphone or computer.
Jordan argues that there is no personal information involved since the company does not collect banking or social security information.
Based on the current features of the fitness watch, what would you recommend be implemented into each device in order to most effectively ensure privacy?

• A.Randomized MAC address.
• B.A2DP Bluetooth profile.
• C.Hashing.
• D.Persistent unique identifier.

Properly configured databases and well-written website codes are the best protection against what online threat?

• A.System modification.
• B.Malware execution.
• C.SQL injection.
• D.Pharming.

Data oriented strategies Include which of the following?

• A.Minimize. Separate, Abstract, Hide.
• B.Encryption, Hashing, Obfuscation, Randomization.
• C.Consent. Contract, Legal Obligation, Legitimate interests.
• D.Inform, Control, Enforce, Demonstrate.

Which of the following is the key function that Intrusion Detection and Prevention Systems (IDPS) contribute to safeguarding privacy?

• A.Encrypting sensitive data at rest and in transit.
• B.Anonymizing user data collected for analysis.
• C.Patching software vulnerabilities regularly to prevent exploitation.
• D.Enforcing authorized access or data exfiltration.