Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
Which of the following actions can help an organisation improve the security of their router? Select ALL that apply
The correct answers are B and C. Not all routers have a firewall, but if they do, it should be used. Option A is incorrect because the router should be placed in a secure location. Option D is incorrect because you can't run a script on a router. P.195
Domain: 3.2
Tracy is a logistics manager who is using an algorithm to solve a problem. She needs to work out the shortest travel time between a warehouse and a client's location. She is using past data to help solve the problem. What type of algorithm is she using?
This is dynamic programming as it optimizes a problem using past data. Divide and conquer splits the problem into subproblems. Brute force tries all possible solutions until it finds the correct one. Simple recursive is used for repetitive calculations.
What is the role of a Data Controller in an organisation?
A Data Controller is responsible for making decisions regarding data management, including where it is stored and how long it is retained. This role is legally recognized. (P.122)
Fluffy Pillows Ltd has recently expanded its operations and has hired more staff. These staff will work remotely and because of this Fluffy Pillows Ltd is in need of buying and upgrading their IT systems. The CEO of Fluffy Pillows is examining the security of currently held data in preparation for the expansion and has recently completed a document which looks into what data is stored where and what the consequences would be if this data were to be stolen or corrupted. In his research he has found multiple data entries for the same information, which he believes could lead to inaccuracies in data reporting. He is also concerned that the data isn't being stored securely and is unsure whether he should retain some of the confidential personal details on employees who have left the business. He has decided that along with the introduction of new systems it is important that all members of staff at Fluffy Pillows are aware of the responsibilities of storing data correctly and the risks of cyber attacks.
What is the main concern with regards to the quality of data currently held?
This is commission---data has been created (commissioned) by mistake, leading to multiple entries for the same thing.
What is meta-data?
Metadata is information about data. For example, in a spreadsheet, the data includes entries in cells, while metadata describes the number of rows and columns. (P.73)
Arnold Park is the UK's leading second-hand car retailer. Customers can purchase cars either at a retail outlet or online. Since the cost of purchase is generally high for the average customer, Arnold Park offers various payment options, including loans.
Arnold Park collects many different types of data on cars and its customers. Which of the following is it most likely to get from a third-party data provider?
Credit ratings are obtained from third-party financial institutions, as Arnold Park does not have direct access to this information. The other options relate to data that Arnold Park can collect internally.
Exam domains verified against: Official CIPS L6M7 exam guide, last checked September 2026.
Evaluate the term big data and its rise in procurement and supply, covering the transition from technical problem to business opportunity, the 3Vs (volume, velocity, variety), and data scalability. Understand the need for big data, diversity of data sources including sensors, devices, third parties and web applications, and data types ranging from real-time to unstructured formats.
Evaluate requirements for data integrity and confidentiality under legal frameworks like GDPR and the UK Data Protection Act, covering NDAs and intellectual property rights. Assess implications of data disruption on organisations through resilience strategies and system redundancy, and evaluate international standards including ISO/IEC 27001:2013 and the Payment Card Industry Data Security Standard.
Evaluate cyber security terminology and supply chain security drivers including cyber-terrorism, malware and advanced persistent threats. Assess data security technologies combining software solutions like encryption with hardware-based protection, and secure administration policies such as backups, data masking and data erasure to minimise cyber risks.
Sample question from this domain above: Q1
Common questions about the exam itself
