EMT Practice Test

1. Question Content...

---

Question1: Which of the following is the BEST approach to minimize privacy risk when collecting personal data?

Question2: Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?

Question3: Which of the following vulnerabilities is MOST effectively mitigated by enforcing multi-factor authentication to obtain access to personal information?

Question4: When configuring information systems for the communication and transport of personal data, an organization should:

Question5: Which of the following is the GREATEST obstacle to conducting a privacy impact assessment (PIA)?

Question6: An organization uses analytics derived from archived transaction data to create individual customer profiles for customizing product and service offerings. Which of the following is the IT privacy practitioner's BEST recommendation?

Question7: Which of the following describes a user's "right to be forgotten"?

Question8: Which of the following is the BEST way for an organization to limit potential data exposure when implementing a new application?

Question9: Which of the following is MOST important when designing application programming interfaces (APIs) that enable mobile device applications to access personal data?

Question10: What is the PRIMARY means by which an organization communicates customer rights as it relates to the use of their personal information?

Question11: Which of the following poses the GREATEST privacy risk for client-side application processing?

Question12: Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Question13: Which of the following is the BEST way to hide sensitive personal data that is in use in a data lake?

Question14: Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?

Question15: An organization is concerned with authorized individuals accessing sensitive personal customer information to use for unauthorized purposes. Which of the following technologies is the BEST choice to mitigate this risk?

Question16: A software development organization with remote personnel has implemented a third-party virtualized workspace to allow the teams to collaborate. Which of the following should be of GREATEST concern?

Question17: Which of the following should be done FIRST to address privacy risk when migrating customer relationship management (CRM) data to a new system?

Question18: Of the following, who should be PRIMARILY accountable for creating an organization's privacy management strategy?

Question19: Which of the following vulnerabilities would have the GREATEST impact on the privacy of information?

Question20: Which of the following deployed at an enterprise level will MOST effectively block malicious tracking of user Internet browsing?

Question21: Which of the following is MOST important to establish within a data storage policy to protect data privacy?

Question22: Which of the following should be considered personal information?

Question23: When choosing data sources to be used within a big data architecture, which of the following data attributes MUST be considered to ensure data is not aggregated?

Question24: Which of the following helps to ensure the identities of individuals in two-way communication are verified?

Question25: Which of the following protocols BEST protects end-to-end communication of personal data?

Question26: A new marketing application needs to use data from the organization's customer database. Prior to the application using the data, which of the following should be done FIRST?

Question27: Which of the following is the GREATEST benefit of adopting data minimization practices?

Question28: Which of the following is the BEST method to ensure the security of encryption keys when transferring data containing personal information between cloud applications?

Question29: Which of the following hard drive sanitation methods provides an organization with the GREATEST level of assurance that data has been permanently erased?

Question30: Which of the following is the MOST important consideration to ensure privacy when using big data analytics?

Question31: Which of the following is the PRIMARY reason that a single cryptographic key should be used for only one purpose, such as encryption or authentication?

Question32: An organization is developing a wellness smartwatch application and is considering what information should be collected from the application users. Which of the following is the MOST legitimate information to collect for business reasons in this situation?

Question33: Which of the following is the BEST way to manage different IT staff access permissions for personal data within an organization?

Question34: Which of the following should be done FIRST to establish privacy to design when developing a contact-tracing application?

Question35: Which of the following is the GREATEST concern for an organization subject to cross-border data transfer regulations when using a cloud service provider to store and process data?

Question36: Which of the following is the BEST way to protect the privacy of data stored on a laptop in case of loss or theft?

Question37: A multinational corporation is planning a big data initiative to help with critical business decisions. Which of the following is the BEST way to ensure personal data usage is standardized across the entire organization?

Question38: Which of the following BEST enables an IT privacy practitioner to ensure appropriate protection for personal data collected that is required to provide necessary services?

Question39: Which of the following is the BEST way to validate that privacy practices align to the published enterprise privacy management program?

Question40: Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?