Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the APICS CPIM CPIM-8.0 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam CPIM-8.0 Premium Access

View all detail and faqs for the CPIM-8.0 exam

Go to Exam

858 Students Passed

93% Average Score

91% Same Questions

Viewing page 13 out of 13 pages

Viewing questions 181-195 out of questions

Questions # 181:

In which of the following circumstances is an organization MOST likely to report the accidental release of personal data to the European Union (EU) General Data Protection Regulation (GDPR) supervisory authority and affected users?

Options:

The release of personal data was made to a highly trusted third-party vendor and there was confirmation that the data was not accessed before it was returned.

The personal data was stored in a highly encrypted format and there is confirmation that the encryption keys were not accessed or released.

All the personal data from the accidental release was from individuals who are not living in the EU.

The personal data released only contained the ages and names of children who may or may not be living in the EU.

Questions # 182:

Which of the following actions hinders the transition from a push system to a pull system?

Options:

Using standardized containers

Using work orders as a backup

Introducing kanban cards as authorization for material movement

Maintaining a constant number of kanban cards during minor changes in the level of production

Answer

Explanation

A push system is a production system that relies on forecasts and schedules to plan the production and distribution of goods and services. A pull system is a production system that responds to actual customer demand and signals to trigger the production and distribution of goods and services. A transition from a push system to a pull system requires a change in the mindset and the processes of the organization, as well as the adoption of new tools and techniques to enable a demand-driven production system12.

One of the tools that is commonly used in a pull system is kanban, which is a visual signal that indicates the need for replenishment of materials or products. Kanban cards are attached to standardized containers that hold a fixed amount of inventory. When a container is empty, the kanban card is sent back to the upstream process as a signal to produce more. This way, the inventory level is controlled by the actual consumption of the downstream process, and the production is synchronized with the demand13.

One of the actions that hinders the transition from a push system to a pull system is using work orders as a backup. Work orders are documents that authorize the production of a certain quantity of a product or a service, based on a forecast or a schedule. Work orders are typical of a push system, as they are not triggered by the actual customer demand, but by the planned production. Using work orders as a backup means that the organization is not fully committed to the pull system, and still relies on the push system to ensure the availability of inventory. This can create confusion, inconsistency, and inefficiency in the production system, as well as increase the inventory holding costs and the risk of obsolescence1 .

Therefore, using work orders as a backup is the correct answer, as it is an action that hinders the transition from a push system to a pull system. The other options are actions that support the transition, as they are aligned with the principles and practices of a pull system.

Questions # 183:

While doing a penetration test, auditors found an old credential hash for a privileged user. To prevent a privileged user's hash from being cached, what is the MOST appropriate policy to mandate?

Options:

Add privileged user to the domain admin group.

Add privileged users to the protected users group.

Enable security options for each privileged user.

Place each privileged user in a separate Kerberos policy.

Questions # 184:

An organization has identified that an individual has failed to adhere to a given standard set by the organization. Based on the needs of the organization, it was decided that an exception process will be created. What is the PRIMARY benefit of establishing an exception process?

Options:

Prevent future material audit findings.

Provide administrators with more autonomy.

Enable management of organizational risk.

Ensure better Business Continuity (BC).

Questions # 185:

The Information Technology (IT) manager of a large organization has been tasked with implementing a distributed third-party Identity As A Service (IDaaS). The local security team is concerned that the Identity Provider (IdP) and resource provider have direct connectivity outside of enterprise control. Which of the following authentication methods BEST address this concern?

Options:

Signed assertion

Federation authorities access list

Manual registration

Proxied federation

Questions # 186:

An organization's security policy requires sensitive information to be protected when being transmitted to external sources via would be the BEST security solution to choose?

Options:

Use spam filters and anti-virus software to send emails externally.

Configure digital signatures to send emails externally.

Configure the system to utilize to send encrypted emails externally.

Use e-mail security gateway to send emails externally.

Questions # 187:

Exhibit:

Question # 187

A company has prioritized customers A, B, and C, filling orders in that sequence. What are the impacts to customer service levels for customers B and C?

Options:

100% service levels for B and C

Customer B has higher service level

Customer C has higher service level

Customer B and C have same service level

Questions # 188:

An organization received a notification from a Commercial Off-The-Shelf (COTS) provider that one of its products will no longer be supported. Using obsolescence progression stages, which of the following risk trigger points was activated in this case?

Options:

End of Life (EOL)

End of Maintenance

End of Service Life (EOSL)

End of Repair

Questions # 189:

A web application is found to have SQL injection (SQLI) vulnerabilities. What is the BEST option to remediate?

Options:

Use prepared statements with parameterized queries

Do allow or use Structured Query Language (SQL) within GET methods.

Use substitution variables for all Structure Query Language (SQL) statements.

Do not allow quote characters to be entered.

Questions # 190:

What is the PRIMARY secure protocol used by a Content Delivery Network (CDN)?

Options:

Internet Protocol Security (IPsec)

Secure shell (SSH)

Transport Layer Security (TLS)

Secure File Transfer Protocol (SFTP)

Questions # 191:

Which technology is BEST suited to establish a secure communications link between an individual’s home office and the organization’s Local Area Network (LAN)?

Options:

Switched Port Analyzer (SPAN)

Representational State Transfer (REST)

Remote Desktop Protocol (RDP)

Virtual Private Network (VPN)

Questions # 192:

In a Zero Trust (ZT) model, where should the enforcement component be placed and why?

Options:

Between the policy engine and the trust engine, because it enforces security policies

As close to the workload as possible, because it impacts authorization decisions

As close to the workload as possible, because it impacts authentication decisions

Between the data stores and the trust engine, because it improves security policies

Questions # 193:

When starting an external benchmarking study, a firm must first:

Options:

determine the metrics which will be measured and compared.

identify the target firms with which to benchmark against.

understand its own processes and document performance.

determine its areas of weakness versus the competition's.

Questions # 194:

Why would a network administrator monitor Internet of Things (IoT) security differently than the security of standards network devices?

Options:

IoT devices are not developed with cybersecurity in mind.

IoT devices are unencrypted.

IoT devices require Power over Ethernet.

IoT devices are wireless.

Questions # 195:

A large organization that processes protected data issues preconfigured laptops to workers who then access systems and data based on their role. As their technology ages, these laptops are replaced with newer devices. What is the BEST solution to mitigate risk associated with these devices?