MENU
Which of the following CANNOT be effectively determined during a code audit?
Suggested Answer: D
Get Premium CIPT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
FL
Floyd
12 months ago
I'm surprised C is even an option, seems like it should be trackable!
TA
Tandra
1 year ago
Wait, can we really not check if data is shared incorrectly?
CE
Celeste
1 year ago
Totally agree, A is subjective and can't be determined.
JU
Julie
1 year ago
I think D can be verified, right?
AL
Alpha
1 year ago
C is tricky, can't really check that during an audit.
JU
Justa
1 year ago
I’m leaning towards C too, but I wonder if there’s a way to check for consent records even after a crash. It feels like a gray area in audits.
LO
Lon
1 year ago
I feel like option D could also be tricky. We can check if differential privacy is implemented, but how do we know if it actually anonymizes data effectively?
IR
Irma
1 year ago
I remember a practice question about access control logic, and it was clear that audits can assess that. So, I don't think A is the answer.
HE
Herschel
1 year ago
I think option C might be the right answer, but I'm not entirely sure. It seems like a server crash would make it hard to verify consent records.
DA
Daniel
1 year ago
Okay, I think I've got a good handle on this. I'll need to identify the skill gaps and then determine which team member would be the best fit for the training course based on their current skills.
GO
Golda
1 year ago
Enabling auto sign-on for the user's IP address? I'm not sure that would fix the problem here. Seems like a bit of a stretch.
MU
Muriel
1 year ago
Hmm, I'm a bit unsure about this one. The options seem similar, so I'll need to read them carefully to determine the key feature.
PH
Phil
1 year ago
This question seems pretty straightforward. I think the key is understanding how Defenders behave when the Console is unreachable during upgrades.
RY
Ryann
1 year ago
Hmm, this looks like a tricky one. I'll need to think carefully about the relationships between the tables and the options presented.
WI
Wilda
1 year ago
If the code audit can't determine whether the privacy implementation is working, I guess the auditors are just going to have to 'anonymize' the results. *wink wink*
MA
Marge
1 year ago
D seems like the obvious choice here. Evaluating the implementation of differential privacy is a complex task that goes beyond a typical code audit.
GR
Gracia
1 year ago
C) Whether consent is durably recorded in the case of a server crash.
RO
Rozella
1 year ago
B) Whether data is being incorrectly shared with a third-party.
HE
Hershel
1 year ago
A) Whether access control logic is recommended in all cases.
GE
Georgeanna
2 years ago
Haha, I bet the developers wish they could just 'crash the server' to avoid that pesky consent issue. C must be the right answer!
EL
Elvera
1 year ago
Definitely, consent needs to be recorded properly even in case of a server crash. It's a crucial aspect of data privacy.
RE
Rex
1 year ago
Yeah, crashing the server wouldn't solve that problem. It's important to have a backup plan.
SA
Salome
1 year ago
I think C is the right answer too. It's tricky to ensure consent is durably recorded.
EM
Emmanuel
2 years ago
I think B is the right answer. Verifying whether data is being shared correctly with third-parties is a key part of a code audit.
FR
Francisca
1 year ago
B) Whether data is being incorrectly shared with a third-party.
VE
Venita
2 years ago
A) Whether access control logic is recommended in all cases.
DE
Desiree
2 years ago
I'm pretty sure the correct answer is A. Access control logic is a crucial part of a code audit, so that can't be effectively determined during one.
AN
Antonio
2 years ago
But consent being durably recorded is crucial for data privacy.
MA
Maynard
2 years ago
I disagree, I believe the answer is A.
AN
Antonio
2 years ago
I think the answer is C.