DSCI DSCI Certifications DCPLA Questions & Answers

• Question 1:

  Which of the following are key contributors that would enhance the complexity in implementing security measures for protection of personal information? (Choose all that apply.)

  A. Data collection through multiple modes and channels

  B. Evolution of nimble and flexible business processes affecting access management

  C. Regulatory requirements to issue privacy notice and data breach notification in specified format

  D. None of the above

  Correct Answer: ABC

• Question 2:

  With respect to privacy implementation, organizations should strive for which of the following:

  A. Meaningful compliance

  B. Demonstrable accountability

  C. Checklist based exercise

  D. None of the above

  Correct Answer: A

• Question 3:

  What are the Nine Privacy Principles as described in DSCI Privacy Framework (DPF??

  I) Use Limitation II) Accountability III) Data Quality IV) Notice V) Preventing Harm VI) Choice and Consent VII) Access and Correction VIII) Data Minimization IX) Openness X) Disclosure to Third Parties XI) Right to be Forgotten XII) Collection limitation XIII) Security

  A. I, II, III, IV, V, VI, VII, VIII, IX

  B. I, II, IV, V, VI, VII, IX, X, XII, XIII

  C. I, II, III, IV, V, VI, VII, VIII, XII

  D. I, II, III, IV, VII, VIII, IX, X, XI

  Correct Answer: B

• Question 4:

  Which of the following could be considered as triggers for updating privacy policy? (Choose all that apply.)

  A. Regulatory changes

  B. Privacy breach

  C. Change in service provider for an established business process

  D. Recruitment of more employees

  Correct Answer: AB

• Question 5:

  With respect to privacy monitoring and incident management process, which of the following should be a part of a standard incident handling process?

  I) Incident identification and notification II) Investigation and remediation III) Root cause analysis IV) User awareness training on how to report incidents

  A. I and II

  B. III and IV

  C. I, II and III

  D. All of the Above

  Correct Answer: D

• Question 6:

  Which of the following is not an objective of VPI?

  A. To enable identification of processes, functions and relationships handling personal information

  B. Assess the current state of data spread and transactions of the organization to map this against its privacy objectives

  C. Enable an organization to map its data operations and categorization of PI

  D. None of the above

  Correct Answer: D

• Question 7:

  Which of the following is not an objective of POR?

  A. Create an inventory of business processes, enterprise and operational functions, client relationships that deal with personal information

  B. Identify all the activities, functions and operations that can be attributed to the privacy initiatives of an organization

  C. Evaluate the role of corporate function in legal compliance management, its relations with IT, and security functions. Evaluate the role of legal function in compliance matters

  D. Establish a privacy function to address the activities, functions and operations that are required to manage the privacy initiatives

  Correct Answer: C

• Question 8:

  How are privacy and data protection related to each other?

  A. Data protection is a subset of privacy.

  B. Privacy is a subset of data protection.

  C. The terms `privacy' and `data protection' are interchangeable.

  D. They are unrelated.

  Correct Answer: A

• Question 9:

  In the landmark case _______________ the Honourable Supreme Court of India reaffirmed the status of Right to Privacy as a Fundamental Right under Part III of the constitution.

  A. M. P. Sharma and others vs. Satish Chandra, District Magistrate, Delhi, and others

  B. Maneka Gandhi vs. Union of India

  C. Justice K. S. Puttaswamy (Retd.) and Anr. vs. Union of India And Ors

  D. Olga Tellis vs. Bombay Municipal Corporation

  Correct Answer: C

• Question 10:

  Which of the following are the key factors that need to be considered for determining the applicability of the privacy principles? (Choose all that apply.)

  A. The role of the organization in determining the purpose of the data collection

  B. How and where the data is coming in the organization

  C. Requirements stipulated by the local authorities from where the organization operating

  D. Organization's commitment to the external stakeholder with respect to privacy

  Correct Answer: AB