New 2025 L6M7 exam questions Welcome to download the newest PassLeader L6M7 PDF dumps (85 Q&As)
P.S. Free 2025 CIPS Level 6 Professional Diploma L6M7 dumps are available on Google Drive shared by PassLeader
NEW QUESTION # 23
Which of the following approaches to cyber security takes a bottom-up approach to assessing vulnerabilities meticulously item by item?
- A. component approach
- B. system approach
- C. elementary approach
- D. technology approach
Answer: A
Explanation:
This is the component approach - it looks at each individual component (each part of the IT system) in turn to check its okay. When a component is not directly controlled by the organisation (e.g. something to do with a supplier) this is called a dependency. Component approach is a bottom-up approach and is the opposite of the top-down approach which is called the 'system driven approach'. P.179 Domain: 3.2
NEW QUESTION # 24
Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn't being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.
What type of document has the CEO created?
- A. Requisition Form
- B. Business Impact Assessment
- C. Risk Assessment
- D. Recovery Objectives Report
Answer: B
Explanation:
This is a Business Impact Assessment because it talks about consequences. A Risk Assessment would look at the likelihood and severity of a security breach and would probably be done next. A Recovery Objectives Report would then be created after that if needed.
NEW QUESTION # 25
In order to keep data secure, which three things should be considered?
- A. Confidentiality, availability, integrity
- B. Integrity, location, format
- C. Location, availability, access
- D. Access, accuracy, confidentiality
Answer: A
Explanation:
This is the CIA triangle which is from p.143. The three aspects are the three corners of the triangle. Remember this one for the exam as I've heard it comes up frequently. Just remember data security = CIA = confidentiality, integrity and availability.
Domain: 3.1
NEW QUESTION # 26
Bob is the CEO of Big Leaf Company and has a lot of sensitive data on his phone. The IT department has advised Bob he should increase his security measures to protect unwanted people accessing his phone, which he often leaves on his desk when he goes to Board Meetings. Which of the following would be most useful to Bob?
- A. Firewall
- B. Multi-factor authentication
- C. Biometrics
- D. CCTV in his office
Answer: B
Explanation:
Multi-factor authentication would be the most useful to protect a mobile phone. Multi-factor authentication uses three things: something you know (password), something you have (a secret code or token), and something you are (biometric scan). This is more secure than biometrics alone. CCTV does not prevent someone from accessing Bob's phone. A firewall is better suited for an IT system or intranet. P.187 Domain: 3.2
NEW QUESTION # 27
Which of the following would be considered personal data? Select ALL that apply
- A. A child's Date of Birth
- B. The time that someone drove into a carpark
- C. The average age of customers in a retail store
- D. An employee's work ID number
Answer: A,D
Explanation:
Personal data is anything that can be used to identify someone, so options A and D are correct. Examples of personal data include any form of ID number, addresses, dates of birth, bank details, DNA, or medical information. Option B is incorrect because it's an average age, not a person's age. Option C is incorrect because you can't identify someone from the time they entered a car park. P.120 Domain: 2.3
NEW QUESTION # 28
Which of the following uses data with more than three dimensions?
- A. Array
- B. Taxonomy
- C. Hierarchy
- D. Data cube
Answer: D
Explanation:
Data Cube is the correct answer. It sounds wrong because a cube has three dimensions, but in the world of data, a data cube has more than three dimensions. Taxonomy is a way of organizing two-dimensional data. An array is single-dimensional data. Hierarchy is just there to distract and does not relate to data in this context.
NEW QUESTION # 29
Data that is produced in real time is known as .... ?
- A. Prompt
- B. Streaming
- C. AI
- D. Taxonomy
Answer: B
Explanation:
Streaming refers to real-time data processing. A common example is streaming services like Netflix, where data (the show) is received in real time. In business, streaming can involve live data on product locations or machine efficiency. (P.61)
NEW QUESTION # 30
It is important for all Procurement and Supply Chain professionals to use Big Data in order to create efficiencies. Is this statement TRUE?
- A. No - not all businesses are able to support the use of Big Data
- B. Yes - Big Data can save procurement and supply chain functions money in the long term
- C. No - Big Data can lead to job losses and therefore should be avoided
- D. Yes - any organisation that refuses to use Big Data will be left behind and be unable to compete
Answer: A
Explanation:
Not all businesses need Big Data. Investing in technology should be based on a clear return on investment, and some organizations may not have enough data to justify its use. (P.36)
NEW QUESTION # 31
Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company's IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry's presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain's Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What is the biggest risk to the data?
- A. Physical break-ins or hacking
- B. Equipment failure or malfunction
- C. Supply chain issues
- D. Workforce issues
Answer: B
Explanation:
The most significant risk in this scenario is equipment failure or malfunction due to the overheating server room. If the servers overheat and fail, it could lead to data loss or system downtime. (P.106)
NEW QUESTION # 32
Below are details of 5 companies that use Big Dat
a. Each company has a different type of data and applies different quality checks to ensure its accuracy.
Instructions:
Drag and drop the correct Data Type and Quality Check into the table for each company. Some options may not be used.
Answer:
Explanation:
NEW QUESTION # 33
In Data Analytics, what is the term 'black swan' used to describe?
- A. A false pattern of data that appears
- B. An unexpected pattern is discovered in the data
- C. A missing piece of data prevents pattern identification
- D. A data size too small to extract a meaningful pattern
Answer: A
Explanation:
A black swan refers to false pattern recognition-when a pattern appears in data but does not actually exist.
NEW QUESTION # 34
A remote monitoring system is unable to protect an organisation from which of the following risks?
- A. Phishing
- B. Malware
- C. Unusual activity on the system
- D. Data corruption
Answer: D
Explanation:
Remote monitoring helps protect against cyber threats by tracking system activity and blocking malware or phishing attempts. However, it cannot prevent data corruption, which can occur due to human error or intentional tampering. (P.184)
NEW QUESTION # 35
BuyBoy.com is an online retailer that uses predictive analytics and a recommender system to suggest items for users to purchase.
Which types of data would the system use to produce recommendations?
- A. Characteristics and credit ratings
- B. Historical and predictive
- C. Historical and health
- D. Characteristics and user interactions
Answer: D
Explanation:
Recommender systems use customer characteristics (e.g., age, gender, preferences) and user interactions (e.g., previous searches, purchases, and browsing history) to suggest products. Credit ratings and health data are not typically used for product recommendations in e-commerce.
NEW QUESTION # 36
Arnold Park is the UK's leading second-hand car retailer. Customers can purchase cars either at a retail outlet or online. Since the cost of purchase is generally high for the average customer, Arnold Park offers various payment options, including loans.
Arnold Park collects many different types of data on cars and its customers. Which of the following is it most likely to get from a third-party data provider?
- A. Customer satisfaction scores
- B. Credit ratings
- C. Most popular makes and models
- D. Average cost of a car in 2019
Answer: B
Explanation:
Credit ratings are obtained from third-party financial institutions, as Arnold Park does not have direct access to this information. The other options relate to data that Arnold Park can collect internally.
NEW QUESTION # 37
What is the purpose of a 'Logic Gate'?
- A. To take input from two transistors and convert it to one output
- B. To increase the operating speed of a computer
- C. To display data in different formats, e.g., videos
- D. To assist in the analysis of large data sets
Answer: A
Explanation:
Logic Gates take inputs and convert them to outputs. They perform mathematical calculations, count, compare numbers, and remember data. (P.4)
NEW QUESTION # 38
Zach is the Head of Procurement at a super secret military base. He does not want anyone outside of the base to know what he is procuring or which suppliers he uses as this information could be critical to national defence. He is aware that cyber criminals may be interested in stealing this information so he has decided to disconnect critical machines and systems from the internet. What is this approach to data security known as?
- A. Non-repudiation
- B. Air-gapping
- C. Filtering
- D. Unsyncing
Answer: B
Explanation:
This is air-gapping. Air-gapping is when you disconnect from an outside network such as the internet. P.171 Domain: 3.1
NEW QUESTION # 39
The speed at which data can be transferred and accessed over the internet is known as ... ?
- A. Bandwidth
- B. Tolerance
- C. Latency
- D. Gigabytes
Answer: C
Explanation:
Latency refers to the time it takes for data to be transmitted. Bandwidth, in contrast, refers to the amount of data that can be transmitted. (P.111)
NEW QUESTION # 40
Wiggles Ltd works closely with a supplier called Waggles Incorporated. They are considering a merger but this is not yet public knowledge. The CEOs of each organisation have acknowledged the risk of cyber security in relation to the negotiation and have decided to restrict communications between the organisations on the matter to only a few select individuals. What form of cyber threat does this reduce?
- A. Social engineering and phishing
- B. Spreading of rumours
- C. Installation of malware on hardware devices
- D. Denial of service
Answer: A
Explanation:
If most employees at Wiggles and Waggles don't know the information, they are pointless targets for social engineering. You can only get information from someone who knows something. Option C is incorrect-although restricting information will reduce rumours, this isn't a cyber threat. P.170 Domain: 3.1
NEW QUESTION # 41
What is the correct order of the 'Fetch-Execute' Cycle?
- A. Fetch, Execute, Decode, Store
- B. Fetch, Execute, Store, Decode
- C. Fetch, Decode, Execute, Store
- D. Fetch, Store, Decode, Execute
Answer: C
Explanation:
The correct order is Fetch, Decode, Execute, Store. Fetch (find the instruction), Decode (understand it), Execute (carry out the operation), and Store (save the result). A computer can run this cycle over 2.5 million times per second!
NEW QUESTION # 42
Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company's IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry's presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain's Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What should Henry's next steps be?
- A. Contract a third-party cloud storage provider to manage the data on behalf of Purple Rain Ltd
- B. Complete a Priority Assessment and Recovery Objectives
- C. Train all members of staff in the importance of password-protecting their work and the dangers of phishing
- D. Submit a budget request to increase the IT Security budget
Answer: B
Explanation:
Given Henry's focus on data resilience, the next logical step is to complete a Priority Assessment and define Recovery Objectives. This will help identify which data and systems are most at risk and require immediate attention in the Data Resilience Plan. (P.105)
NEW QUESTION # 43
The storage of data by a third party is commonly known as what?
- A. Chips
- B. Cloud
- C. Integrated circuit
- D. USB
Answer: B
Explanation:
This is The Cloud, which may also be called 'cloud computing' or 'cloud storage.' It is commonly used in mobile phones to store data externally rather than on the device itself.
NEW QUESTION # 44
Which of the following measures prevents access to a system?
- A. Authentication and antivirus
- B. Antivirus and encryption
- C. Firewalls and authentication
- D. Firewalls and encryption
Answer: C
Explanation:
Firewalls and authentication prevent unauthorized access to a system. Antivirus and encryption focus on preventing data corruption rather than access control. (P.184)
NEW QUESTION # 45
Ramesh is Head of Procurement at Wiggle Waggle Ltd. He is using a tool for predictive modeling and statistical analysis to inform upon future strategic business decisions. Which of the following is he using?
- A. BI
- B. Black Box
- C. Big Data
- D. Analytics
Answer: D
Explanation:
Analytics predicts future trends using data. BI (Business Intelligence) focuses on past and present data but does not predict. Big Data is just large datasets, and Black Box refers to decision-making without transparency.
NEW QUESTION # 46
......
L6M7 exam questions from PassLeader dumps: https://www.passleader.top/CIPS/L6M7-exam-braindumps.html (85 Q&As)
Free 2025 CIPS Level 6 Professional Diploma L6M7 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=1yk2YcrDXNgZ_1FekgOem3OuarNZ1aE1G