CIPP/US Practice Exam 2023 with 100% correct answers

Which branch government generally has the final say in the passing of a law? - correct. answer a. The Executive Branch b. the Legislative Branch c. the Operational Branch d. the Judicial Branch Which branch of government does the president belong to? - correct. answer a. The Judicial Branch b. The Executive Branch c. The Operational Branch d. None of these answers How can personal information best be described? - correct. answer a. Any information relating to a natural person b. This depends on the field and even state law c. Directory information d. Information of value Which comprehensive federal privacy laws are there in the US? - correct. answer a. The Children's Online Privacy Protection Act b. The Health Insurance Portability and Accountability Act c. None, there are no comprehensive federal privacy laws in the US d. The General Data Protection Regulation Of the following, which are three different tort categories? - correct. answer a. Negligence, notice breach, intrusion b. Intrusion upon seclusion, strict liability, negligence with blame c. Intentional, negligent, strict liability d. Privacy notice breach, wrongful intrusion, defamation What is the best description of the difference between criminal and civil liability? - correct. answer a. Civil cases are the only cases with victims b. Criminal cases involve entities and persons c. Civil cases are between person and/or entities, whereas criminal cases are brought by the government d. In a civil case no laws are broken In relation to privacy, which of the following is most restrictive for employers in the US? - correct. answer a. The Health Insurance Portability and Accountability Act b. The Children's Online Privacy Protection Act c. The Fourth Amendment d. The Fair and Accurate Credit Transactions Act What is the most likely purpose for which an organization creates a data inventory? - correct. answer a. Showing the public which data are stored b. Creating an overview of data, helpful for creating a compliance and security approach c. Complying with a US legal requirement d. Identifying storage size requirements Which of the following statements is not true regarding data classification? - correct. answer a. Organizations are free to classify data elements a certain way to place it inside or outside the scope of certain laws b. Data classification can help identity applicable laws c. To assist in creating a security strategy d. Help breach response Which of the following contains specific data retention and disposal requirements? - correct. answer a. The Fair and Accurate Credit Transactions Act b. Any pre-emptive law c. The Children's Online Privacy Protection Act d. The Ca