A user who owns a resource wants to give other individuals access to the resource. What control would apply?
Answer(s): C
Why “Discretionary Access Control (DAC)” is the appropriate answerThe owner of a resource possesses the authority to decide who may use that resource. DAC mechanisms are designed specifically for this scenario: they let the resource owner grant or revoke permissions at will, without requiring central policy enforcement. Operations such as “share a file,” “invite a collaborator,” or “publish a document” are classic DAC functions because the owner explicitly delegates access rights.Why the other choices are less suitableMandatory Access Control (MAC) – Access decisions are governed by system-wide policies and labels (e.g., “confidential,” “top-secret”) that users cannot override. The owner does not have discretionary authority; therefore MAC does not match the described use case. Role-Based Access Control (RBAC) – Permissions are assigned based on pre-defined roles within an organization, not on the individual owner’s ad-hoc decision to share a particular resource. While RBAC can enforce broader policies, it does not capture the owner-centric delegation characteristic of the question. Context-of-Authority Controls – This is not a recognized generic access-control model; it may refer to situational rules (e.g., time-of-day, location), which are unrelated to the basic owner-initiated sharing described.Conclusion The control that directly supports a resource owner granting access to others on a case-by-case basis is Discretionary Access Control , making option C the correct answer.
NIST Special Publication 800-16 – Access Control Guidelines ( https://csrc.nist.gov/publications/detail/sp/800-16/rev-1/final ) ISO/IEC 27001:2022 – Information security management systems – Code of practice for information security controls ( https://www.iso.org/standard/75733.html )
What is the potential advantage of homomorphic encryption?
Answer(s): A
Answer is: A. Encrypted information can be analyzed without decrypting it first.Why A is correctHomomorphic encryption enables computation on ciphertext, producing an encrypted result that, when decrypted, matches the outcome of the same operations performed on the plaintext. This property allows data to be processed, searched, or aggregated while it remains encrypted, preserving confidentiality end-to-end.Why the other options are inferiorB: Ciphertext size decreases as the security level increases – Incorrect; ciphertext size typically grows with higher security parameters to maintain strength, not shrink. C: It allows greater security and faster processing times – Partially true about security, but homomorphic schemes are computationally intensive; they do not generally provide faster processing compared to clear-text operations. D: It makes data impenetrable to attacks – Overstates capability; homomorphic encryption protects data in use, but it does not guarantee immunity to all cryptanalytic attacks, especially implementation flaws or side-channel exploits.
International Association of Privacy Professionals (IAPP) – “Homomorphic Encryption Overview” – https://iapp.org/resources/data-privacy-frameworks/homomorphic-encryption/ IBM Security – “What Is Homomorphic Encryption?” – https://www.ibm.com/security/articles/homomorphic-encryptionPrepared for certification exam review, focusing on technical precision and exam-relevant rationale.
What has been found to undermine the public key infrastructure system?
JustificationOption C – Disreputable certificate authorities is the root cause of the most critical PKI failure mode. A trusted hierarchy can be subverted when a CA issues fraudulent certificates or deliberately mis-issues them, thereby destroying the trust model that PKI relies on. Real-world incidents (e.g., DigiNotar 2011, Symantec 2017) demonstrate how compromised or negligent CAs can lead to widespread certificate-trust loss, man-in-the-middle (MITM) capability, and forced revocation of large numbers of certificates.Option A – Man-in-the-middle attacks are often cited as a threat, but they are generally mitigated by PKI mechanisms such as certificate pinning, OCSP stapling, and strict validation of certificate chains. MITM attacks succeed primarily when the underlying trust anchor is already weakened, i.e., when a disreputable CA is involved; thus, this is a symptom rather than the primary systemic flaw.Option B – Inability to track abandoned keys describes a known operational challenge, yet it pertains mainly to key lifecycle management and does not directly undermine the cryptographic trust foundation of PKI. Modern revocation infrastructures (CRLs, OCSP, CRL-DP, etc.) can handle abandoned keys, albeit with administrative overhead.Option D – Browsers missing a copy of the CA’s public key would cause certificate validation failures for specific users, but it is a configuration error rather than an inherent design weakness of PKI. Moreover, browsers are equipped with pre-installed root store updates, making this scenario less pervasive than systemic CA misconduct.Conclusion – The erosion of the trust chain is most fundamentally attributed to disreputable certificate authorities , as they compromise the very premise that certificates uniquely identify a trustworthy entity. This flaw can cascade into broader PKI dysfunction, whereas the other options represent either secondary issues or operational inconveniences.
RFC 5280 – Internet X.509 Public Key Infrastructure Certificate and Certificate Request Syntax Specification. https://www.rfc-editor.org/rfc/rfc5280 “DigiNotar breach” – Wikipedia, https://en.wikipedia.org/wiki/DigiNotar#Security_breach (accessed 2025).
SCENARIOWesley Energy has finally made its move, acquiring the venerable oil and gas exploration firm Lancelot from its long-time owner David Wilson. As a member of the transition team, you have come to realize that Wilson's quirky nature affected even Lancelot's data practices, which are maddeningly inconsistent. "The old man hired and fired IT people like he was changing his necktie," one of Wilson's seasoned lieutenants tells you, as you identify the traces of initiatives left half complete.For instance, while some proprietary data and personal information on clients and employees is encrypted, other sensitive information, including health information from surveillance testing of employees for toxic exposures, remains unencrypted, particularly when included within longer records with less-sensitive data. You also find that data is scattered across applications, servers and facilities in a manner that at first glance seems almost random.Among your preliminary findings of the condition of data at Lancelot are the following:Cloud technology is supplied by vendors around the world, including firms that you have not heard of. You are told by a former Lancelot employee that these vendors operate with divergent security requirements and protocols.The company's proprietary recovery process for shale oil is stored on servers among a variety of less- sensitive information that can be accessed not only by scientists, but by personnel of all types at most company locations.DES is the strongest encryption algorithm currently used for any file.Several company facilities lack physical security controls, beyond visitor check-in, which familiar vendors often bypass.Fixing all of this will take work, but first you need to grasp the scope of the mess and formulate a plan of action to address it.Which is true regarding the type of encryption Lancelot uses?
Why option C is correctLancelot’s encryption is described as “the strongest encryption algorithm currently used” and that algorithm is DES . DES (Data Encryption Standard) is a symmetric-key block cipher ; the same secret key is used for both encrypting plaintext into ciphertext and for decrypting ciphertext back into plaintext. In symmetric encryption the encryption key is the decryption key (or mathematically related but operationally treated as a single key material). This matches statement C: “It uses a single key for encryption and decryption.”Why the other choices are not appropriateA – “It employs the data scrambling technique known as obfuscation.” Obfuscation is a reversible transformation that merely hides data structure; it is not a cryptographic encryption algorithm. DES is a formally defined cipher, not an ad-hoc obfuscation method.B – “Its decryption key is derived from its encryption key.” While key-derivation functions exist in some modern schemes, DES does not derive a separate decryption key from an encryption key. The algorithm’s design uses the identical key material for both operations. Claiming derivation adds unnecessary complexity that is not present in the described implementation.D – “It is a data masking methodology.” Data masking replaces sensitive values with non-sensitive placeholders (e.g., tokenization). It does not provide cryptographic confidentiality. DES encrypts data to render it unreadable without the key, which is fundamentally different from masking.Therefore, option C accurately reflects the nature of the encryption used by Lancelot.
NIST FIPS 197 – Data Encryption Standard (DES): https://csrc.nist.gov/publications/fips/fips197/fips_197.pdf NIST SP 800-57 Part 1 – Recommendation for Key Management: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/finalThese documents confirm that DES is a symmetric-key algorithm employing a single key for both encryption and decryption, supporting the selection of option C.
SCENARIOWesley Energy has finally made its move, acquiring the venerable oil and gas exploration firm Lancelot from its long-time owner David Wilson. As a member of the transition team, you have come to realize that Wilson's quirky nature affected even Lancelot's data practices, which are maddeningly inconsistent. "The old man hired and fired IT people like he was changing his necktie," one of Wilson's seasoned lieutenants tells you, as you identify the traces of initiatives left half complete.For instance, while some proprietary data and personal information on clients and employees is encrypted, other sensitive information, including health information from surveillance testing of employees for toxic exposures, remains unencrypted, particularly when included within longer records with less-sensitive data. You also find that data is scattered across applications, servers and facilities in a manner that at first glance seems almost random.Among your preliminary findings of the condition of data at Lancelot are the following:Cloud technology is supplied by vendors around the world, including firms that you have not heard of. You are told by a former Lancelot employee that these vendors operate with divergent security requirements and protocols.The company's proprietary recovery process for shale oil is stored on servers among a variety of less- sensitive information that can be accessed not only by scientists, but by personnel of all types at most company locations.DES is the strongest encryption algorithm currently used for any file.Several company facilities lack physical security controls, beyond visitor check-in, which familiar vendors often bypass.Fixing all of this will take work, but first you need to grasp the scope of the mess and formulate a plan of action to address it.Which procedure should be employed to identify the types and locations of data held by Wesley Energy?
Why “Data inventory” is the correct procedureA data inventory systematically catalogs what data exists, where it resides, in which formats, and who owns it . This gives the transition team the full picture of the fragmented data landscape at Lancelot (e.g., encrypted vs. unencrypted files, cloud providers, server locations, and physical sites). The inventory is the foundation for any subsequent privacy-focused activity; it answers the question “what data do we actually have?” before we can audit, classify, or secure it.Why the other options are insufficientPrivacy audit – evaluates compliance and risk but does not, by itself, locate or enumerate data assets; it relies on an inventory to be effective. Log collection – captures system-generated events (access, errors) but does not reveal the content or location of stored data stores. Data classification – involves labeling data based on sensitivity, yet it presupposes that the data has already been discovered and mapped; without an inventory, classification cannot be performed accurately.Practical steps for the inventory1. Identify all data stores (servers, cloud buckets, backup media, removable media). 2. Document data owners, custodians, and business purpose. 3. Record metadata such as file types, storage locations, encryption status, and retention schedules. 4. Use automated tools or manual discovery to map relationships between data elements across sites.With a complete inventory in hand, Wesley Energy can then proceed to classification, risk assessment, and remediation planning.
IAPP CIPP/E Body of Knowledge – Data Mapping and Inventory ( https://iapp.org/certify/cipte/ ) NIST SP 800-53 Rev. 5 – SC-12: Information System Inventory and Assessment ( https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final )
A credit card with the last few numbers visible is an example of what?
JustificationThe scenario describes a credit card where only the last few digits are displayed, while the rest of the data remains hidden or obscured. This technique is used to protect the full PAN (Primary Account Number) while still allowing identification of the card; it is a classic example of masking data . Masking data is a privacy-preserving method that partially reveals an identifier by replacing part of it with a placeholder (e.g., asterisks), thereby reducing exposure risk. Synthetic data refers to artificially generated datasets that preserve statistical properties but contain no real personal information; the credit-card example does not meet this definition. Sighting controls are mechanisms that restrict observational access to sensitive information (e.g., limiting who can view a record), which is broader than the technical act of leaving only part of a number visible. Partial encryption involves encrypting only a portion of the data; the visible digits are not encrypted at all, they are simply shown, so this term does not apply.Conclusion: Among the given options, Masking data precisely describes the practice of displaying only a subset of a credit-card number to minimize privacy risk.
IAPP CIPP/E Study Guide – Data Masking Techniques: https://iapp.org/resources/cipp-study-guide/data-masking/ European Data Protection Board (EDPB) Guidance on Pseudonymisation and Anonymisation, mentioning masking as a privacy-enhancing measure: https://edpb.europa.eu/law/guidance/pseudonymisation_en
What is an example of a just-in-time notice?
Answer(s): D
I would like to ask you some questions, so please output in json format following the given template."matched_user_question": "", "confidence_score": <score between 0.0 and 1.0>
A vendor has been collecting data under an old contract, not aligned with the practices of the organization. Which is the preferred response?
Answer(s): B
Why Option B is the preferred responseRegulatory alignment – Updating the contract ensures the vendor’s data collection practices satisfy current privacy laws and internal policy requirements, eliminating the risk of non-compliance. Risk mitigation – Rather than abruptly ending the relationship (which can cause service disruption) or destroying valuable data (which may have legitimate business or legal retention value), contractual amendment allows continued oversight and monitoring. Operational continuity – Maintaining the vendor while correcting the contract preserves critical services and avoids the cost and effort of a full vendor-selection process. Governance best practice – Modern privacy frameworks (e.g., GDPR Art. 28, NIST 800-53 PL-2) emphasize the need for enforceable contractual clauses that reflect contemporary data-handling standards; updating the agreement satisfies this control.Why the other options are less suitableDestroy the data (A) – Eliminates potentially useful information and may breach contractual or statutory retention obligations; it does not address the underlying privacy practice gap. Continue the terms of the existing contract (C) – Leaves the vendor’s non-compliant practices in place, exposing the organization to ongoing privacy risk and possible regulatory enforcement. Terminate the contract and begin a new vendor selection (D) – Can be disproportionate (service disruption, cost) and does not guarantee that a new vendor will meet the required standards without first establishing updated contractual controls.Thus, the most balanced and technically sound approach is to amend the contract to bring the vendor into alignment with current privacy practices.
IAPP – Managing Third-Party Risk (2023): https://iapp.org/resources/detail/managing-third-party-risk/ IAPP – Data Processing Agreement (DPA) Template (2024): https://iapp.org/resources/detail/data-processing-agreement-template/
Share your comments for IAPP CIPT exam with other users:
data quality oecd