CIPT Privacy by Design and Engineering 3

Question 1

Which software development practice integrates privacy requirements into each sprint or iteration of an Agile project?

Accepted Answer

Privacy by Design in Agile (privacy user stories)

Answer

Writing privacy user stories and including privacy acceptance criteria in each sprint embeds Privacy by Design into Agile workflows.

Question 2

A CIPT is reviewing a new mobile app. She recommends that the app request location permission only when a location-based feature is actively used. Which principle does this reflect?

Accepted Answer

Context-aware data collection (purpose limitation)

Answer

Context-aware data collection ensures personal data is gathered only when directly needed for a specific user action, limiting purpose and minimizing collection.

Question 3

What is the main goal of applying 'data separation' or 'compartmentalization' as a privacy engineering technique?

Accepted Answer

Limiting the combination of data that could re-identify individuals

Answer

Data separation prevents linking datasets that together could re-identify individuals, limiting the risk of aggregation attacks.

Question 4

Which type of architecture ensures that no single server or administrator can access a user's complete personal data, distributing trust across multiple parties?

Accepted Answer

Distributed or decentralized privacy architecture

Answer

Distributed privacy architectures split data across multiple parties so no single point of failure or insider can access all personal data.

Question 5

A privacy engineer proposes using 'k-anonymity' when publishing a dataset. What does this guarantee?

Accepted Answer

Each record is indistinguishable from at least k-1 other records on quasi-identifiers

Answer

k-anonymity ensures that any individual in a dataset cannot be uniquely identified because their quasi-identifier combination matches at least k-1 other individuals.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Privacy by Design and Engineering 3