CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 3

Question 1

K-anonymity ensures that any individual in a dataset is indistinguishable from at least how many other individuals with respect to quasi-identifiers?

Accepted Answer

k

Answer

In a k-anonymous dataset, every record shares the same quasi-identifier values with at least k-1 other records, making the group size at least k.

Question 2

Which privacy control restricts what a requesting application or user can see based on a defined need-to-know policy?

Accepted Answer

Role-based access control (RBAC)

Answer

RBAC grants access to personal data only to roles with a legitimate need, limiting exposure and supporting least-privilege principles.

Question 3

A developer implements a feature where users can download all their personal data in a machine-readable format. This satisfies which data subject right?

Accepted Answer

Right to data portability

Answer

The right to data portability under GDPR Article 20 allows individuals to receive their data in a structured, commonly used format.

Question 4

Which concept describes building privacy protections directly into IT systems and business practices from the outset?

Accepted Answer

Privacy by Design

Answer

Privacy by Design, developed by Ann Cavoukian, embeds privacy proactively into system design rather than adding it as an afterthought.

Question 5

Secure multi-party computation (SMPC) allows multiple parties to jointly compute a function over their inputs while keeping those inputs what?

Accepted Answer

Private from each other

Answer

SMPC enables collaborative computation so that no participant learns the other parties' private inputs.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 3