CIMAPRO19-P03-1 Exam - Topic 4 Question 79 Discussion

Actual exam question for CIMA's CIMAPRO19-P03-1 exam

Question #: 79
Topic #: 4

DFR is an online retailer that sells picture frames The software running on DFR's website enables customers to log in and make purchases by inputting an email address as a user name and a password that must contain at least eight characters, including upper and lower case letters, numbers and punctuation marks (e.g. , $ or!) Once logged in, customers can check previous orders that they have placed.

Customers can also use DFR's website to change personal details, including credit card numbers and delivery addresses Whenever they wish to use those facilities, the software sends a text message containing a six-digit number to their mobile phones They must input that number before the system will accept changes to their personal details

Which TWO of the following statements are correct?

AIt is illogical to have different security measures in place for orders and for access to personal details.

BThe software treats customers' personal details as being more sensitive than their ordering histories

CThe arrangement with the text message will have no effect on the security associated with changing personal details

DCustomers should be able to update the mobile phone numbers in their DFR accounts using only their email addresses and passwords for access

EThe software should never show the whole of a customer's credit card number on screen, even if the customer has logged in and input the six-digit number.

Show Suggested Answer

Suggested Answer: C, E

by Lisha at Sep 14, 2024, 06:47 AM

Limited Time Offer

25%

Off

Get Premium CIMAPRO19-P03-1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gearldine

3 months ago

D seems off, updating phone numbers should require more security.

upvoted 0 times

...

Yen

3 months ago

E should always be a rule, no full credit card numbers on screen!

upvoted 0 times

...

Weldon

3 months ago

Wait, how can C be true? That doesn't sound right.

upvoted 0 times

...

Pilar

4 months ago

I disagree with A, different measures make sense for different data.

upvoted 0 times

...

Lachelle

4 months ago

B is definitely correct, personal details are more sensitive.

upvoted 0 times

...

Kallie

4 months ago

I’m confused about D. It seems like updating mobile numbers should require more than just an email and password, but I can't recall the exact reasoning from my notes.

upvoted 0 times

...

Jame

4 months ago

I practiced a question similar to this where we had to evaluate security protocols, and I think E makes a lot of sense. Showing the full credit card number seems risky.

upvoted 0 times

...

Emogene

4 months ago

I'm not entirely sure, but I feel like A could be a trick question. Different security measures might actually make sense for different types of information.

upvoted 0 times

...

Janet

5 months ago

I remember discussing how sensitive personal details should have stronger security measures than order histories, so I think B might be correct.

upvoted 0 times

...

Kenneth

5 months ago

Ah, I see what they're getting at. The question is really about evaluating the logic and consistency of the security approach. I've got a strategy to tackle this.

upvoted 0 times

...

Corrina

5 months ago

The text message verification for personal details seems like a good additional security measure. I'll make sure to consider how that impacts the overall security compared to the order process.

upvoted 0 times

...

Pamella

5 months ago

Hmm, I'm a bit confused by the wording here. I'll need to read through the details carefully to understand the nuances of the security approach.

upvoted 0 times

...

Dell

5 months ago

This seems like a straightforward security question. I'll focus on identifying the key differences in security measures between orders and personal details.

upvoted 0 times

...

Tasia

5 months ago

This is a tricky one. I'll need to weigh the pros and cons of the different security measures to determine which statements are correct.

upvoted 0 times

...

Jesusa

1 year ago

E is a no-brainer. Showing the full credit card number, even after verification, is a huge security risk. What were they thinking?

upvoted 0 times

...

Tula

1 year ago

D is just silly - that would completely undermine the security measures. Who thought of that one?

upvoted 0 times

Gracie

1 year ago

D) Customers should be able to update the mobile phone numbers in their DFR accounts using only their email addresses and passwords for access.

upvoted 0 times

...

Deangelo

1 year ago

B) The software treats customers' personal details as being more sensitive than their ordering histories.

upvoted 0 times

...

Ty

1 year ago

A) It is illogical to have different security measures in place for orders and for access to personal details.

upvoted 0 times

...

Maryanne

1 year ago

Agreed, B seems to be the correct answer. The personal details are more sensitive, so they need stronger protection.

upvoted 0 times

...

Lizbeth

1 year ago

Sending a one-time code to the customer's phone is a good way to add an extra layer of security when changing sensitive details.

upvoted 0 times

Selma

1 year ago

User 3

upvoted 0 times

...

An

1 year ago

User 2

upvoted 0 times

...

Eugene

1 year ago

User 1

upvoted 0 times

...

Lucille

1 year ago

The software's approach to security seems reasonable. Separate measures for orders and personal details make sense to me.

upvoted 0 times

Deeanna

1 year ago

E) The software should never show the whole of a customer's credit card number on screen, even if the customer has logged in and input the six-digit number.

upvoted 0 times

...