CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 5

Question 1

Which privacy principle holds that the same level of privacy protection applies whether a user is interacting anonymously or under a verified identity?

Accepted Answer

Full functionality (positive-sum)

Answer

The full functionality (positive-sum) principle rejects the false trade-off between privacy and usability, aiming to accommodate all legitimate interests.

Question 2

A web application assigns a random session token instead of embedding the user's account number in the URL. This is an example of which PET?

Accepted Answer

Tokenization

Answer

Tokenization replaces sensitive values like account numbers with random tokens, reducing the exposure of real identifiers.

Question 3

Under the California Consumer Privacy Act (CCPA), which right allows consumers to prevent a business from selling their personal information?

Accepted Answer

Right to opt-out of sale

Answer

The CCPA gives California residents the right to opt out of the sale of their personal information to third parties.

Question 4

Which data anonymization weakness occurs when a dataset has only a few records per combination of quasi-identifiers, making individuals easy to re-identify?

Accepted Answer

Data sparsity re-identification

Answer

Data sparsity re-identification happens when rare combinations of quasi-identifiers (e.g., ZIP code, birth date, sex) uniquely or nearly uniquely identify individuals.

Question 5

Which control requires that a minimum number of authorized personnel must cooperate to perform a sensitive operation, preventing unilateral action?

Accepted Answer

Multi-party authorization (M-of-N control)

Answer

M-of-N (multi-party authorization) requires M out of N designated individuals to approve an action, guarding against insider abuse.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 5