SCENARIOmountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on your passport and national identification card. You are led down a long corridor with server rooms on each side, secured by combination locks built into the doors. You climb a flight of stairs and are led into an office that is lighted brilliantly by skylights where the GFDC Director of Security, Dr. Monique Batch, greets you. On the far wall you notice a bank of video screens showing different rooms in the facility. At the far end, several screens show different sections of the road up the mountainDr. Batch explains once again your mission. As a data security auditor and consultant, it is a dream assignment: The GFDC does not want simply adequate controls, but the best and most effective security that current technologies allow."We were hacked twice last year," Dr. Batch says, "and although only a small number of records were stolen, the bad press impacted our business. Our clients count on us to provide security that is nothing short of impenetrable and to do so quietly. We hope to never make the news again." She notes that it is also essential that the facility is in compliance with all relevant security regulations and standards.You have been asked to verify compliance as well as to evaluate all current security controls and security measures, including data encryption methods, authentication controls and the safest methods for transferring data into and out of the facility. As you prepare to begin your analysis, you find yourself considering an intriguing question: Can these people be sure that I am who I say I am?You are shown to the office made available to you and are provided with system login information, including the name of the wireless network and a wireless key. Still pondering, you attempt to pull up the facility's wireless network, but no networks appear in the wireless list. When you search for the wireless network by name, however it is readily found.Why would you recommend that GFC use record encryption rather than disk, file or table encryption?
Answer(s): B
Why B – record-level encryption is preferredGranular protection – Encrypting at the record level means each logical data element (e.g., a single customer transaction) can be protected independently. If a breach occurs, the attacker can only read the records that were not encrypted, rather than gaining unrestricted access to an entire dataset or a whole file system. This limits the scope of damage and brings the principle of least-privilege into the encryption design. Fine-grained access control – Record-level keys can be scoped per record, per application, or per business unit. The data owner can enforce “need-to-know” policies on a per-record basis without redesigning the storage layer. Operational flexibility – Applications can retrieve, query, or update individual records without needing to decrypt an entire file or folder, preserving performance for legitimate users while still allowing bulk deletion or archiving. Compliance relevance – Many privacy regulations (e.g., GDPR, PCI-DSS) require that personal data be rendered “unreadable” at the point of exposure. Record-level encryption directly satisfies that requirement because each piece of personal data is independently protected.Why the other options are weakerA: “Record encryption is asymmetric, a stronger control measure.” Record-level encryption can be performed with symmetric keys; the security strength comes from the key size and management, not whether the algorithm is asymmetric. Asymmetric encryption is rarely used for bulk data at rest because of performance penalties and key-distribution complexity.C: “Record encryption involves tag masking, so its metadata cannot be decrypted.” Tag masking (e.g., tokenization) is a separate data-format technique; it does not inherently increase the cryptographic strength of encryption. Moreover, metadata protection is not the primary driver for choosing record-level encryption, and many record-level schemes do not mask metadata by default.D: “Record encryption allows for encryption of personal data only.” This is factually incorrect—record-level encryption can encrypt any data, structured or unstructured. Limiting it to “personal data only” would waste controls and create unnecessary complexity. Security decisions should be based on protection level, not on the content type alone.Conclusion Because record encryption delivers granular, independent protection of each logical data unit, it provides the strongest containment of a breach while still allowing precise access controls and compliance acceptance. The other statements either misstate the nature of record encryption or describe benefits that are secondary or inaccurate.
1. International Association of Privacy Professionals (IAPP) – Certified Information Privacy Technologist (CIPT) Study Guide, Chapter 3, Encryption techniques. https://iapp.org/cipt 2. European Union Agency for Cybersecurity (ENISA) – Encryption and Key Management for Data at Rest, 2022. https://www.enisa.europa.eu/publications/encryption-and-key-management
SCENARIOmountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on your passport and national identification card. You are led down a long corridor with server rooms on each side, secured by combination locks built into the doors. You climb a flight of stairs and are led into an office that is lighted brilliantly by skylights where the GFDC Director of Security, Dr. Monique Batch, greets you. On the far wall you notice a bank of video screens showing different rooms in the facility. At the far end, several screens show different sections of the road up the mountainDr. Batch explains once again your mission. As a data security auditor and consultant, it is a dream assignment: The GFDC does not want simply adequate controls, but the best and most effective security that current technologies allow."We were hacked twice last year," Dr. Batch says, "and although only a small number of records were stolen, the bad press impacted our business. Our clients count on us to provide security that is nothing short of impenetrable and to do so quietly. We hope to never make the news again." She notes that it is also essential that the facility is in compliance with all relevant security regulations and standards.You have been asked to verify compliance as well as to evaluate all current security controls and security measures, including data encryption methods, authentication controls and the safest methods for transferring data into and out of the facility. As you prepare to begin your analysis, you find yourself considering an intriguing question: Can these people be sure that I am who I say I am?You are shown to the office made available to you and are provided with system login information, including the name of the wireless network and a wireless key. Still pondering, you attempt to pull up the facility's wireless network, but no networks appear in the wireless list. When you search for the wireless network by name, however it is readily found. What measures can protect client information stored at GFDC?
Answer(s): C
Why option C – Server-side controls – is the best choiceServer-side controls are the technical mechanisms that directly protect data while it resides on the storage platforms (e.g., encryption at rest, database-level access controls, intrusion-detection, audit logging, and secure configuration). These controls operate inside the GFDC’s own infrastructure , ensuring that only authorized processes and personnel can read or modify the client-specific information, regardless of how the data is transmitted or where it is displayed. In a high-security environment such as GFDC, the primary objective is to guarantee confidentiality, integrity, and availability (CIA) of stored data ; server-side controls are precisely the layer that enforces that guarantee.Why the other options are less suitableA – De-linking of data into client-specific packets – This describes a logical segmentation technique but does not by itself enforce protection; it merely separates streams and still relies on underlying server controls to enforce confidentiality. B – Cloud-based applications – While cloud services can host data, they are external to the GFDC’s own security perimeter. Relying on a cloud model does not address the need for controls that are under the facility’s direct governance and auditability. D – Data pruning – Pruning removes unnecessary data, which may reduce exposure, but it does not provide a protective mechanism for the data that remains. It is a data-management practice, not a security control.Therefore, the only answer that directly addresses the technical safeguarding of client information on the premises is C – Server-side controls .
NIST Special Publication 800-53 Rev. 5 – Security and Privacy Controls for Information Systems and Organizations ( https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final ) ISO/IEC 27001:2022 – Information security management systems – Requirements ( https://www.iso.org/standard/54534.html )
SCENARIOmountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on your passport and national identification card. You are led down a long corridor with server rooms on each side, secured by combination locks built into the doors. You climb a flight of stairs and are led into an office that is lighted brilliantly by skylights where the GFDC Director of Security, Dr. Monique Batch, greets you. On the far wall you notice a bank of video screens showing different rooms in the facility. At the far end, several screens show different sections of the road up the mountainDr. Batch explains once again your mission. As a data security auditor and consultant, it is a dream assignment: The GFDC does not want simply adequate controls, but the best and most effective security that current technologies allow."We were hacked twice last year," Dr. Batch says, "and although only a small number of records were stolen, the bad press impacted our business. Our clients count on us to provide security that is nothing short of impenetrable and to do so quietly. We hope to never make the news again." She notes that it is also essential that the facility is in compliance with all relevant security regulations and standards.You have been asked to verify compliance as well as to evaluate all current security controls and security measures, including data encryption methods, authentication controls and the safest methods for transferring data into and out of the facility. As you prepare to begin your analysis, you find yourself considering an intriguing question: Can these people be sure that I am who I say I am?You are shown to the office made available to you and are provided with system login information, including the name of the wireless network and a wireless key. Still pondering, you attempt to pull up the facility's wireless network, but no networks appear in the wireless list. When you search for the wireless network by name, however it is readily found.What type of wireless network does GFDC seem to employ?
Answer(s): A
Why the other options are incorrectB: A reluctant network. “Reluctant network” is not a recognized term in wireless standards. Networks are not described by willingness to connect; they are defined by their broadcasting behavior. Since the SSID is discoverable once searched for, the issue is not reluctance but visibility.C: A user verified network. This phrase does not correspond to any IEEE 802.11 terminology. Authentication methods (e.g., WPA2-Enterprise) may be user-verified, but the term does not describe how an SSID appears in a scan. The observed behavior is about the network’s broadcast settings, not an authentication process.Correct answer – A. A hidden network. The SSID is not listed in the default scan results, indicating that the network is configured with the “hiddenSSID” (or “closed network”) option. By default, 802.11 devices only show publicly broadcast SSIDs; to see a hidden one you must manually search for it. This is why the network shows up only after an explicit lookup, exactly matching the description.QuestionIt should be the most secure location housing data in all of Europe, if not the world. The Global Finance Data Collective (GFDC) stores financial information and other types of client data from large banks, insurance companies, multinational corporations and governmental agencies. After a long climb on a mountain road that leads only to the facility, you arrive at the security booth. Your credentials are checked and checked again by the guard to visually verify that you are the person pictured on your passport and national identification card. You are led down a long corridor with server rooms on each side, secured by combination locks built into the doors. You climb a flight of stairs and are led into an office that is lighted brilliantly by skylights where the GFDC Director of Security, Dr. MoniqueBatch, greets you. On the far wall you notice a bank of video screens showing different rooms in the facility. At the far end, several screens show different sections of the road up the mountain. Dr. Batch explains once again your mission. As a data security auditor and consultant, it is a dream assignment: The GFDC does not want simply adequate controls, but the best and most effective security that current technologies allow. “We were hacked twice last year, and although only a small number of records were stolen, the bad press impacted our business. Our clients count on us to provide security that is nothing short of impenetrable and to do so quietly. We hope to never make the news again.” She notes that it is also essential that the facility is in compliance with all relevant security regulations and standards. You have been asked to verify compliance as well as to evaluate all current security controls and security measures, including data encryption methods, authentication controls and the safest methods for transferring data into and out of the facility. As you prepare to begin your analysis, you consider an intriguing question: Can these people be sure that I am who I say I am? You are shown to the office made available to you and are provided with system login information, including the name of the wireless network and a wireless key. Still pondering, you attempt to pull up the facility’s wireless network, but no networks appear in the wireless list. When you search for the wireless network by name, however it is readily found.What type of wireless network does GFDC seem to employ?A: A hidden network. B. A reluctant network. C. A user verified network. D. A wireless mesh network.
IEEE 802.11-2020: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications – Overview of hidden SSID behavior. https://standards.ieee.org/standard/802_11-2020.html Wi-Fi Alliance. “Understanding Hidden SSIDs and Their Security Implications.” https://www.wi-fi.org/learn-about-wifi/security/hidden-ssid
What must be used in conjunction with disk encryption?
Technical justificationDisk encryption secures data at rest by transforming readable information into ciphertext that can only be reverted with the correct decryption key. The key must be protected by a robust authentication mechanism; otherwise an attacker could simply obtain the key and decrypt the data. A strong password (or equivalent secret) provides high-entropy authentication material that is required to unlock the encryption key or to access the encrypted volume. This ensures that only authorized entities can decrypt the data, directly addressing the protection goal of confidentiality. Why the other choices are unsuitableA – Increased CPU speed – Processing speed does not affect the ability of an adversary to obtain the decryption key; it merely influences performance, not security. C – A digital signature – Signatures verify authenticity and integrity of data, but they do not provide the secret material needed to unwrap an encryption key. D – Export controls – These are regulatory constraints on distribution of cryptographic software/hardware; they have no technical relationship to the operation of disk encryption itself.Therefore, a strong password is the essential complementary element that ensures disk encryption provides meaningful protection for data confidentiality in a CISSP context.
NIST SP 800-63B – Digital Authentication Guideline: https://pages.nist.gov/800-63-3/sp800-63b.html Microsoft Docs – BitLocker Drive Encryption Overview: https://learn.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview
Which is NOT a way to validate a person's identity?
Authentication mechanisms are classified by the three factors: something you have (possession), something you know (knowledge), or something you are/do (inherence/behavior). A. Swiping a smartcard uses a physical token → validates possession, a legitimate identity-validation method. C. Answering a knowledge-based question relies on information only the legitimate user knows → validates knowledge, also a proper authentication factor. D. Selecting a picture and tracing a unique pattern exploits a biometric-like behavior (inherence/transaction pattern) → validates a distinctive action, constituting a valid identity check. B. Using a program that creates random passwords merely generates cryptographically random strings; it does not verify any attribute of the individual and therefore does not validate identity .
NIST SP 800-63B: Digital Identity Guidelines – https://csrc.nist.gov/publications/detail/sp/800-63b/final ISO/IEC 24745 – Information technology – Security and privacy – https://www.iso.org/standard/64764.html
Revocation and reissuing of compromised credentials is impossible for which of the following authentication techniques?
Answer(s): A – Biometric dataWhy biometric authentication cannot be revoked or re-issued: Biometric identifiers (e.g., fingerprints, iris patterns, facial geometry) are intrinsic to the user and are captured as immutable physical traits. Once a biometric template is compromised, the underlying biological characteristic cannot be “changed” without fundamentally altering the individual. Unlike secrets or tokens, a biometric value cannot be reset, re-issued, or replaced with a new secret; the only mitigation is to enroll a different modality or to switch to a different authentication method altogether. Consequently, the revocation of a compromised biometric credential is effectively impossible, forcing a complete re-enrollment and often a change of the underlying device or sensor.Why the other options are not impossible:Picture passwords (B) – The image or pattern used as a password is a memorized secret that can be replaced with a new picture or pattern at any time; revocation is simply a matter of changing the stored template. Personal identification number (PIN) (C) – PINs are secret numeric codes stored in a system; if compromised, the user can immediately set a new PIN, restoring security without affecting other credentials. Radio-frequency identification (RFID) (D) – RFID tags or cards carry adjustable credentials (e.g., keys, certificates). When a tag is compromised, it can be de-provisioned and a new tag provisioned with fresh cryptographic material, effectively revoking the old credential.Because only biometric authentication fundamentally ties the credential to an unchangeable physiological attribute, it is the sole technique among the choices for which revocation and re-issuance of compromised credentials is impossible.
1. NIST Special Publication 800-63-3 – Digital Identity Guidelines https://csrc.nist.gov/publications/detail/sp/800-63-3/final2. ISO/IEC 19794-5 – Information technology – Biometric interoperability – Data interchange format – Part 5: Fingerprint images (provides specifications for biometric data handling and security considerations) https://www.iso.org/standard/73090.html
What is the main function of the Amnesic Incognito Live System or TAILS device?
Correct Answer: A – “It allows the user to run a self-contained computer from a USB device.”Why A is correctTAILS (The Amnesic Incognito Live System) is a live operating system that boots directly from removable media (USB stick, DVD, etc.). It loads entirely into RAM, leaving no persistent state on the host machine, thereby fulfilling the “amnesic” requirement. The entire OS, its applications, and bundled security tools (Tor, encryption utilities, sandboxed browsers, etc.) are packaged within that single, self-contained image, enabling the user to run a complete computer environment without installing anything on the target system.Why B is less suitableWhile TAILS does erase traces of activity, its primary design is not to “access systems with a credential that leaves no discernable tracks.” Option B implies a focus on credential-based remote access with stealthy authentication, which describes more specialized tools (e.g., credential-stealing or covert remote admin utilities) rather than the whole purpose of TAILS.Why C is less suitableTAILS does not encrypt data stored on any computer on a network; it provides on-disk encryption only for the data it creates on the volatile storage of the live session. Network-wide encryption is outside the scope of its core functionality and is therefore inaccurate.Why D is less suitableTAILS does not “cause a system to suspend its security protocols”; rather, it deliberately isolates all activity within a hardened, read-only environment that intentionally enhances security by preventing any modifications to the host OS.
Tails Documentation – Overview: https://tails.boum.org/about/index.en.html Tails Documentation – Security Features: https://tails.boum.org/doc/about/
Which is NOT a drawback to using a biometric recognition system?
Answer(s): D
JustificationA: More maintenance and support – Biometric sensors degrade over time, require regular cleaning, calibration, and updates to the underlying algorithms, leading to added operational overhead. This is a recognized disadvantage. B. Higher cost – Compared with traditional token- or password-based solutions, biometric systems involve expensive hardware (readers, enrollment stations) and ongoing software licensing for sophisticated matching engines, making cost a genuine drawback. C. Limited cross-system compatibility – Proprietary biometric standards and differing sensor vendors often restrict interoperability; integrating a solution with existing access-control infrastructure can be challenging. D. Difficulty of use – This is not an inherent drawback of biometric recognition. Modern systems incorporate intuitive enrollment UI, quick one-touch verification, and optional fallback methods (e.g., PIN), making them generally easy to use for most users. While usability can vary, the difficulty is not a systematic, universal disadvantage compared with the concrete issues listed in A-C.Therefore, option D is the only statement that does not represent a genuine, universal drawback to biometric recognition, making it the correct answer.
International Organization for Standardization. ISO/IEC 30107-3:2018 – Presentation Attack Detection – Part 3: Requirements and Test Methods. https://www.iso.org/standard/75357.html National Institute of Standards and Technology. Biometric Systems: Guidelines for Design and Evaluation. https://csrc.nist.gov/publications/detail/sp/800-76-2/rev-1/final (accessed 2025)
Share your comments for IAPP CIPT exam with other users:
data quality oecd