IAPP CIPT Exam - Topic 5 Question 77 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 77
Topic #: 5

An organization is launching a new online subscription-based publication. As the service is not aimed at children, users are asked for their date of birth as part of the of the sign-up process. The privacy technologist suggests it may be more appropriate ask if an individual is over 18 rather than requiring they provide a date of birth. What kind of threat is the privacy technologist concerned about?

AIdentification.

BInsecurity.

CInterference.

DMinimization.

Show Suggested Answer

Suggested Answer: B

an alternative technique to counter the reduction in use of third-party cookies, where web publishers may consider utilizing data cached by a browser and returned with a subsequent request from the same resource to track unique users is called browser fingerprinting.

by An at Dec 22, 2023, 02:23 PM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ricarda

5 months ago

Interesting point, but isn't it just easier to verify age?

upvoted 0 times

...

Ivette

5 months ago

I think it's more about insecurity, honestly.

upvoted 0 times

...

Minna

6 months ago

Wait, is it really that big of a deal?

upvoted 0 times

...

Sabra

6 months ago

Totally agree, asking for DOB can lead to data leaks.

upvoted 0 times

...

Edward

6 months ago

Sounds like a classic case of identification risk.

upvoted 0 times

...

Monte

6 months ago

I feel like this could also relate to interference, but I lean more towards identification being the main threat here. It's tricky!

upvoted 0 times

...

Cecily

6 months ago

This reminds me of a practice question we did about data minimization. Maybe that's what the technologist is hinting at by suggesting a simpler question?

upvoted 0 times

...

Trinidad

7 months ago

I'm not entirely sure, but I think the privacy technologist is worried about insecurity. It seems like a valid concern with personal data.

upvoted 0 times

...

Janessa

7 months ago

I remember discussing how asking for a date of birth could lead to identification risks, especially if that information gets into the wrong hands.

upvoted 0 times

...

Marguerita

7 months ago

The key here is that the service is not aimed at children, so the privacy technologist is likely trying to minimize the collection of personal information. I'd go with the answer about minimization.

upvoted 0 times

...

Lynelle

7 months ago

I'm a bit confused here. Is the issue about insecurity? Maybe the privacy technologist is worried that storing date of birth information could make the system more vulnerable to breaches or misuse.

upvoted 0 times

...

Verlene

7 months ago

I think the answer is minimization. The privacy technologist is suggesting a way to collect less personal information while still achieving the same goal, which aligns with the principle of data minimization.

upvoted 0 times

...

Major

7 months ago

Hmm, I'm not sure about this one. Could it be about identification? Asking for a date of birth could make it easier to identify individuals, which might be a privacy concern.

upvoted 0 times

...

Oneida

7 months ago

This question seems straightforward. The privacy technologist is likely concerned about minimization, as asking for a date of birth instead of just whether someone is over 18 could lead to the collection of more personal information than necessary.

upvoted 0 times

...

Barrett

7 months ago

Hmm, I'm a bit unsure about this one. I'll need to double-check the Azure Firewall documentation to make sure I understand the deployment constraints and limitations.

upvoted 0 times

...

Carey

7 months ago

Okay, let me think this through. The QoS profile is for quality of service, so that's not it. The DoS Protection profile and policy both sound like they could be related to SYN flood protection, so I'll go with those.

upvoted 0 times

...

Johnetta

11 months ago

Haha, I bet the privacy technologist is just trying to avoid another 'Y2K' situation. Can't be too careful with those date fields, you know!

upvoted 0 times

...

Lazaro

11 months ago

This is a tricky one. I'm going to go with B, insecurity. Asking for the date of birth could make the system less secure and more vulnerable to hacking or other security breaches.

upvoted 0 times

Judy

10 months ago

D) Minimization.

upvoted 0 times

...

Johnathon

10 months ago

C) Interference.

upvoted 0 times

...

Jenise

10 months ago

B) Insecurity.

upvoted 0 times

...

Mariko

11 months ago

A) Identification.

upvoted 0 times

...

Madelyn

12 months ago

Hmm, I'm not sure. Could it be interference? Maybe the privacy technologist is worried that the date of birth could be used to interfere with the user's online activities or privacy in some way.

upvoted 0 times

Jacquelyne

11 months ago

C) Interference.

upvoted 0 times

...

William

11 months ago

B) Insecurity.

upvoted 0 times

...

Lucy

11 months ago

A) Identification.

upvoted 0 times

...

Sabra

12 months ago

I think the answer is minimization. The privacy technologist wants to minimize the amount of personal information collected by only asking if the user is over 18, rather than requiring their exact date of birth.

upvoted 0 times

Carmen

11 months ago

C) Interference.

upvoted 0 times

...

Craig

11 months ago

B) Insecurity.

upvoted 0 times

...

Brittni

12 months ago

A) Identification.

upvoted 0 times

...

Jeannine

1 year ago

The privacy technologist is concerned about identification. Asking for a date of birth could lead to the user's identity being revealed, which is a privacy risk.

upvoted 0 times