Free Shared Assessments CTPRP Exam Questions

Become Shared Assessments Certified with updated CTPRP exam questions and correct answers

Page: 1 / 26

Total 126 Questions | Updated On: Apr 29, 2026

Add To Cart

Question 1

Information classification of personal information may trigger specific regulatory obligations. Which statement is the BEST response from a privacy perspective:

A : Personally identifiable financial information includes only consumer report information

B : Public personal information includes only web or online identifiers

C : Personally identifiable information and personal data are similar in context, but may have different legal definitions based upon jurisdiction

D : Personally Identifiable Information and Protected Healthcare Information require the exact same data protection safequards

Answer: C

Question 2

Which of the following factors is LEAST likely to trigger notification obligations in incident response?

A : Regulatory requirements

B : Data classification or sensitivity

C : Encryption of data

D : Contractual terms

Answer: C

Question 3

The BEST time in the SDLC process for an application service provider to perform Threat Modeling analysis is:

A : Before the application design and development activities begin

B : After the application vulnerability or penetration test is completed

C : After testing and before the deployment of the final code into production

D : Prior to the execution of a contract with each client

Answer: A

Question 4

Which type of contract provision is MOST important in managing Fourth-Nth party risk after contract signing and on-boarding due diligence is complete?

A : Subcontractor notice and approval

B : Indemnification and liability

C : Breach notification

D : Right to audit

Answer: A

Question 5

Which statement is TRUE regarding the use of questionnaires in third party risk assessments?

A : The total number of questions included in the questionnaire assigns the risk tier

B : Questionnaires are optional since reliance on contract terms is a sufficient control

C : Assessment questionnaires should be configured based on the risk rating and type of service being evaluated

D : All topic areas included in the questionnaire require validation during the assessment

Answer: C

Page: 1 / 26

Total 126 Questions | Updated On: Apr 29, 2026

Add To Cart