Free L6M7 Questions for CIPS L6M7 Exam [Sep-2025]
Validate your L6M7 Exam Preparation with L6M7 Practice Test (Online & Offline)
CIPS L6M7 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 23
Green Pants Ltd has a lot of sensitive data around their unique designs for pants. Daniela, one of the designers, has noticed there is a weakness in their IT system, which means that data may be accessible to people outside the company. She would like the company to invest in software that can hide or disguise the data so that if it is ever stolen, the designs of the pants are not readable to others. What software is Daniela requesting?
- A. Authentication
- B. Firewall
- C. Proxy
- D. Encryption
Answer: D
Explanation:
Encryption makes data unreadable by converting it into an encoded format using an algorithm. If the data is stolen, it remains unreadable without the decryption key. A common example is WhatsApp's end-to-end encryption. (P.188)
NEW QUESTION # 24
The Data Protection Act covers any data that is input or held on a computer and does not cover paper filing systems. Is this TRUE?
- A. No - the Act covers all forms of information, including electronic, paper-based, and verbal
- B. Yes - information on paper is not considered data
- C. Yes - only electronic data is covered by the Act
- D. No - the Act covers paper-based records
Answer: D
Explanation:
The Act covers paper-based records when stored in a "relevant filing system" but does not cover verbal information. (P.120)
NEW QUESTION # 25
A remote monitoring system is unable to protect an organisation from which of the following risks?
- A. Phishing
- B. Malware
- C. Unusual activity on the system
- D. Data corruption
Answer: D
Explanation:
Remote monitoring helps protect against cyber threats by tracking system activity and blocking malware or phishing attempts. However, it cannot prevent data corruption, which can occur due to human error or intentional tampering. (P.184)
NEW QUESTION # 26
Data Processing includes which of the following steps?
- A. Controlling
- B. Reporting
- C. Storing
- D. Acquisition
- E. Processing
Answer: B,C,D,E
Explanation:
The Data Processing cycle is acquisition - processing - reporting- storing. Do learn this off by heart. The term processing means anything from using data, to altering it, to moving it or publishing it. Data controller is a person or organisation that determines how the data is processed, but it's rarely used as a verb (you don't say I'm 'controlling' the data'). P. 121 Domain: 2.3
NEW QUESTION # 27
Which of the following is a UK-specific law that deals with the rights of data, particularly data that is shared and gathered online?
- A. The Privacy Act 2000
- B. Information Act 2002
- C. Data Protection Act 2018
- D. GDPR
Answer: C
Explanation:
The Data Protection Act 2018 is the UK-specific law that governs data protection and incorporates GDPR into UK legislation. GDPR itself is an EU regulation but is included in UK law under this act.
NEW QUESTION # 28
Joe is a Supply Chain Manager at Crunchy Lettuce Incorporated and is responsible for multiple sets of data on aspects of the business, including suppliers, customers, and manufacturing processes. Joe is aware that the integrity of his data is extremely important as, without accurate data, he is unable to plan effectively for future orders and deliveries.
Which of the following are ways in which data integrity can be affected? Select THREE.
- A. Commission
- B. Corrosion
- C. Manipulation
- D. Corruption
- E. Omission
Answer: A,C,E
Explanation:
Commission: Data is mistakenly created, such as duplicate records.
Omission: Data is accidentally deleted or not recorded.
Manipulation: Data is changed incorrectly, such as an extra zero added to a value.
Corruption is not included because it refers to data being unreadable or damaged rather than integrity being affected by an internal process. Corrosion refers to metal deterioration and is unrelated to data.
NEW QUESTION # 29
Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely, and because of this, Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document that looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research, he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn't being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems, it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.
How can Fluffy Pillows ensure data is accessible for the new staff members who work from home?
- A. Portable laptops
- B. USB devices
- C. Cloud storage
- D. Network Attached Storage
Answer: C
Explanation:
Cloud storage is the answer. All the new people will be working in different places, so there needs to be a central place for them to access documents. Physical storage options such as USBs, laptops, and network-attached storage devices wouldn't work.
Domain: Scenario
NEW QUESTION # 30
What is the name given to the process of producing data about something that was not previously available?
- A. Digitisation
- B. Invention
- C. Digitalisation
- D. Datafication
Answer: D
Explanation:
Datafication means collecting data that wasn't previously available, such as GPS tracking on smartphones. Digitisation is converting paper data into digital format, while digitalisation is using digital technology to transform business operations. (P.12)
NEW QUESTION # 31
A person who enters into another person's computer via illegal means for personal gain, for example to steal data which will benefit them personally, is known as what?
- A. Black-hat hacker
- B. White swan
- C. White-hat hacker
- D. Black swan
Answer: A
Explanation:
This is a black hat hacker. The colour of hat the hacker wears describes their motivation. Black is bad, white is good and grey means they're hacking on behalf of a government. Black swan is about finding patterns in data that don't exist and came up in an earlier chapter. Black-hat hacking is from p.147. I don't think hackers are obliged to wear hats, it's probably just a metaphor, but I've never met one to ask.
Domain: 3.1
NEW QUESTION # 32
Unstructured data can be organized into semi-structured or structured data by using a short word or phrase to describe what is held in the digital file. What is this marker commonly known as?
- A. Bot
- B. Syncing
- C. Tag
- D. Structured Query Language
Answer: C
Explanation:
A tag is a marker describing data, commonly used in social media and databases.
NEW QUESTION # 33
Wiggles Ltd works closely with a supplier called Waggles Incorporated. They are considering a merger but this is not yet public knowledge. The CEOs of each organisation have acknowledged the risk of cyber security in relation to the negotiation and have decided to restrict communications between the organisations on the matter to only a few select individuals. What form of cyber threat does this reduce?
- A. Social engineering and phishing
- B. Spreading of rumours
- C. Installation of malware on hardware devices
- D. Denial of service
Answer: A
Explanation:
If most employees at Wiggles and Waggles don't know the information, they are pointless targets for social engineering. You can only get information from someone who knows something. Option C is incorrect-although restricting information will reduce rumours, this isn't a cyber threat. P.170 Domain: 3.1
NEW QUESTION # 34
Which of the following would be considered personal data? Select ALL that apply
- A. A child's Date of Birth
- B. The time that someone drove into a carpark
- C. The average age of customers in a retail store
- D. An employee's work ID number
Answer: A,D
Explanation:
Personal data is anything that can be used to identify someone, so options A and D are correct. Examples of personal data include any form of ID number, addresses, dates of birth, bank details, DNA, or medical information. Option B is incorrect because it's an average age, not a person's age. Option C is incorrect because you can't identify someone from the time they entered a car park. P.120 Domain: 2.3
NEW QUESTION # 35
Which of the following can be used to protect a computer's operating system and hardware and often requires a user to update?
- A. Firmware
- B. Firewall
- C. Internet of Things
- D. Server
Answer: A
NEW QUESTION # 36
Donkey Logistics Ltd is transitioning into the digital era and is looking to implement technology that can track the location of deliveries when they are en route to customers. Which of the following is able to store a high-volume data set which can be read by a hand-held device?
- A. Barcode
- B. GPS
- C. Navistar
- D. RFID
Answer: D
Explanation:
RFID (Radio Frequency Identification) is correct. GPS and Navistar are for location tracking, but they do not store large volumes of data. Barcodes store limited data.
NEW QUESTION # 37
Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company's IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry's presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain's Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What would Henry's BIA show?
- A. How important the data is to business operations
- B. Why the IT department is underfunded
- C. The risks of cyberbullying facing the company
- D. What system the data is held on
Answer: D
Explanation:
A Business Impact Assessment (BIA) identifies the systems in which data is stored, its origin, whether it is transferred elsewhere, and the company's ability to recover data. It does not assess funding issues or non-IT risks like cyberbullying. (P.104)
NEW QUESTION # 38
What is the correct order of the 'Fetch-Execute' Cycle?
- A. Fetch, Execute, Decode, Store
- B. Fetch, Execute, Store, Decode
- C. Fetch, Decode, Execute, Store
- D. Fetch, Store, Decode, Execute
Answer: C
Explanation:
The correct order is Fetch, Decode, Execute, Store. Fetch (find the instruction), Decode (understand it), Execute (carry out the operation), and Store (save the result). A computer can run this cycle over 2.5 million times per second!
NEW QUESTION # 39
David works in the Accounts department of Touchdown Ltd. He has received an email from a sender he is unfamiliar with. The email asks him to look at an invoice which the sender believes includes an error. There is an attachment to the email. David has recently undergone Cyber Security training and is suspicious of the email. What type of security threat does David think the email contains?
- A. SQL injection
- B. Social engineering
- C. Phishing
- D. Hacking
Answer: C
Explanation:
This is an example of a phishing email. Phishing is when a cybercriminal tries to do something malicious like steal data or put a virus on your computer by deceiving the user. In this case, they're pretending to be a supplier and want David to open an email attachment, which is probably not an invoice. See p.148 Domain: 3.1
NEW QUESTION # 40
Freddy is a Procurement Manager at XYZ Ltd. He has heard about Artificial Intelligence and is researching how this could be used to make his department more efficient. He acknowledges that there would be a cost implication to implement this type of technology but what else must Freddy have in order for AI to be used to its full potential?
- A. The 3Vs
- B. Data to train an algorithm
- C. A large team to train the AI to do their jobs
- D. Access to Big Data
Answer: B
Explanation:
AI requires data to train algorithms, such as past orders, suppliers, and supplier performance data. The 3Vs relate to Big Data, but AI does not necessarily require Big Data. (P.17-18)
NEW QUESTION # 41
Data that is produced in real time is known as .... ?
- A. Prompt
- B. Streaming
- C. AI
- D. Taxonomy
Answer: B
Explanation:
Streaming refers to real-time data processing. A common example is streaming services like Netflix, where data (the show) is received in real time. In business, streaming can involve live data on product locations or machine efficiency. (P.61)
NEW QUESTION # 42
Which of the following are examples of 'hardware'? Select ALL that apply
- A. Mouse
- B. Programme
- C. Keyboard
- D. Internet
- E. Database
- F. CPU
Answer: A,C,F
Explanation:
Hardware are the physical parts of a computer; CPU, keyboard, and mouse. Software consists of programs that run on a computer. (P.4)
NEW QUESTION # 43
......
Check Real CIPS L6M7 Exam Question for Free (2025): https://braindumps2go.dumpstorrent.com/L6M7-exam-prep.html