An organization is developing a wellness smartwatch application and is considering what information should be collected from the application users. Which of the following is the MOST legitimate information to collect for business reasons in this situation?

1. A. Height, weight, and activities
2. B. Sleep schedule and calorie intake
3. C. Education and profession
4. D. Race, age, and gender

Correct Answer: B

Which of the following protocols BEST protects end-to-end communication of personal data?

1. A. Transmission Control Protocol (TCP)
2. B. Transport Layer Security Protocol (TLS)
3. C. Secure File Transfer Protocol (SFTP)
4. D. Hypertext Transfer Protocol (HTTP)

Correct Answer: B

Which of the following is the MOST important consideration when writing an organization’s privacy policy?

1. A. Using a standardized business taxonomy
2. B. Aligning statements to organizational practices
3. C. Ensuring acknowledgment by the organization’s employees
4. D. Including a development plan for personal data handling

Correct Answer: B

Which of the following should an IT privacy practitioner do FIRST following a decision to expand remote working capability to all employees due to a global pandemic?

1. A. Evaluate the impact resulting from this change.
2. B. Revisit the current remote working policies.
3. C. Implement a virtual private network (VPN) tool.
4. D. Enforce multi-factor authentication for remote access.

Correct Answer: B

Which of the following vulnerabilities would have the GREATEST impact on the privacy of information?

1. A. Private key exposure
2. B. Poor patch management
3. C. Lack of password complexity
4. D. Out-of-date antivirus signatures

Correct Answer: C