IAPP Certified Information Privacy Professional/United States (CIPP/US) 認定 CIPP-US 試験問題 (Q79-Q84):
質問 # 79 Under the Driver's Privacy Protection Act (DPPA), which of the following parties would require consent of an individual in order to obtain his or her Department of Motor Vehicle information?
A. Marketers wishing to distribute bulk materials.
B. Law enforcement agencies performing investigations.
C. Attorneys gathering information related to lawsuits.
D. Insurance companies needing to investigate claims.
正解：A
解説： https://dmv.ny.gov/forms/mv15dppa.pdf
質問 # 80 The rules for "e-discovery" mainly prevent which of the following?
A. The practice of employees using personal devices for work
B. A breach of an organization's data retention program
C. The loss of information due to poor data retention practices
D. A conflict between business practice and technological safeguards
正解：C
解説： Page 346 of the learning material - ".....e-discovery rules, which require automated and large-scale production of emails and other corporate documents during the discovery process prior to trial".
質問 # 81 Which federal law or regulation preempts state law?
A. Controlling the Assault of Non-Solicited Pornography and Marketing Act
B. Telemarketing Sales Rule
C. Health Insurance Portability and Accountability Act
D. Electronic Communications Privacy Act of 1986
正解：C
質問 # 82 John, a California resident, receives notification that a major corporation with $500 million in annual revenue has experienced a data breach. John's personal information in their possession has been stolen, including his full name and social security numb. John also learns that the corporation did not have reasonable cybersecurity measures in place to safeguard his personal information. Which of the following answers most accurately reflects John's ability to pursue a legal claim against the corporation under the California Consumer Privacy Act (CCPA)?
A. John can sue the corporation for the data breach to recover monetary damages suffered as a result of the data breach, and in some circumstances seek statutory damages irrespective of whether he suffered any financial harm.
B. John cannot sue the corporation for the data breach because only the state's Attoney General has authority to file suit under the CCPA.
C. John has no right to sue the corporation because the CCPA does not address any data breach rights.
D. John can sue the corporation for the data breach but only to recover monetary damages he actually suffered as a result of the data breach.
正解：D
質問 # 83 SCENARIO Please use the following to answer the next QUESTION Felicia has spent much of her adult life overseas, and has just recently returned to the U.S. to help her friend Celeste open a jewelry store in Californi a. Felicia, despite being excited at the prospect, has a number of security concerns, and has only grudgingly accepted the need to hire other employees. In order to guard against the loss of valuable merchandise, Felicia wants to carefully screen applicants. With their permission, Felicia would like to run credit checks, administer polygraph tests, and scrutinize videos of interviews. She intends to read applicants' postings on social media, ask Question:s about drug addiction, and solicit character references. Felicia believes that if potential employees are serious about becoming part of a dynamic new business, they will readily agree to these requirements. Felicia is also in favor of strict employee oversight. In addition to protecting the inventory, she wants to prevent mistakes during transactions, which will require video monitoring. She also wants to regularly check the company vehicle's GPS for locations visited by employees. She also believes that employees who use their own devices for work-related purposes should agree to a certain amount of supervision. Given her high standards, Felicia is skeptical about the proposed location of the store. She has been told that many types of background checks are not allowed under California law. Her friend Celeste thinks these worries are unfounded, as long as applicants verbally agree to the checks and are offered access to the results. Nor does Celeste share Felicia's concern about state breach notification laws, which, she claims, would be costly to implement even on a minor scale. Celeste believes that even if the business grows a customer database of a few thousand, it's unlikely that a state agency would hassle an honest business if an accidental security incident were to occur. In any case, Celeste feels that all they need is common sense - like remembering to tear up sensitive documents before throwing them in the recycling bin. Felicia hopes that she's right, and that all of her concerns will be put to rest next month when their new business consultant (who is also a privacy professional) arrives from North Carolina. Which law will be most relevant to Felicia's plan to ask applicants about drug addiction?
A. The Genetic Information Nondiscrimination Act of 2008.
B. The Occupational Safety and Health Act (OSHA).
C. The Americans with Disabilities Act (ADA).
D. The Health Insurance Portability and Accountability Act (HIPAA).
正解：C
質問 # 84 ......
CertJuken必要な内容を収集してIAPP分析し、CIPP-USトレーニングクイズに記入することで、試験受験者の98％以上が楽かつ効率的に試験に合格しました。 Certified Information Privacy Professional/United States (CIPP/US)試験に関連する学習したいすべてのメッセージは、CIPP-US練習エンジンで見つけることができます。 Certified Information Privacy Professional/United States (CIPP/US)環境で行われた変更および次の試験での予測は、それらによって以前にコンパイルされます。
