Oversee Privacy and Security Plan PMI-CPMAI Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A pharmaceutical company is training an AI model on clinical trial data. The data is collected from multiple research sites, stored in a central repository, and will be processed for analysis. The company must ensure that data is protected during collection, storage, and processing, and that only authorized researchers can access it. What is the most appropriate set of controls?

   • AUse a VPN for data collection and store data in an encrypted database
   • BUse TLS for data collection, encrypt data at rest, and implement RBAC for researcher access
   • CAnonymize all data at the point of collection and store it in a public cloud
   • DGrant all researchers full access to the data to speed up the project
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a role-based access control (RBAC) system for an AI project, what is the primary basis for granting a user access to a specific training dataset?

   • AThe user's familiarity with the data
   • BThe user's personal request for access
   • CThe user's role or job function within the project
   • DThe user's department budget allocation
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What mechanism does the CCPA provide to consumers to stop a business from 'selling' their personal information, which may include data used in AI applications?

   • AAn opt-in mechanism for all data processing
   • BA mandatory arbitration process
   • CA requirement to delete all data after 12 months
   • DAn opt-out mechanism
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An AI training dataset is stored in a cloud storage bucket. Which encryption method is most directly responsible for protecting this data from unauthorized access while it is stored?

   • AEncryption at rest
   • BEncryption in transit
   • CData masking
   • DNetwork segmentation
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A US-based analytics company sells consumer profiles to advertisers. The company is subject to CCPA. A consumer submits a request to opt out of the sale of their data. What must the company do?

   • AHonor the opt-out request and stop selling the consumer's data, including updating any third-party data brokers
   • BRequire the consumer to provide additional personal information to verify their identity
   • CCharge a fee to process the opt-out request
   • DIgnore the request because the data is already anonymized
   Reveal Solution Discussion Select an answer first