DSCI DCPLA Online Practice Questions and Exam Preparation

DSCI DCPLA Online Questions & Answers

• Question 21:

  Certification once granted, will be valid for period of _______ years subject to surveillance assessments.

  A. 4
  B. 5
  C. 3
  D. 1
  C. 3

• Question 22:

  From the following list, identify the technology aspects that are specially designed for upholding privacy:

  I) Data minimization II) Intrusion prevention system III) Data scrambling IV) Data loss prevention V) Data portability VI) Data obfuscation VII) Data encryption VIII) Data mirroring

  A. Only I, III, V, VII and VIII
  B. Only I, II, III, VII and VIII
  C. Only I, III, IV, VI and VII
  D. Only II, V, VI, VII and VIII
  C. Only I, III, IV, VI and VII

  ---

  Explanation/Reference:

• Question 23:

  What are the two phases of DSCI Privacy Third Party Assessment?

  A. Initial and Detailed
  B. Primary and Secondary
  C. Initial and Final
  D. None of the above
  C. Initial and Final

• Question 24:

  Categorize the following statements as: Visibility/ Capability /Enforcement /Demonstration Problems

  "The network is unable to restrict unwanted external connections carrying sensitive information."

  A. Visibility
  B. Capability
  C. Enforcement
  D. Demonstration
  B. Capability

• Question 25:

  Which of the following is not an objective of POR?

  A. Create an inventory of business processes, enterprise and operational functions, client relationships that deal with personal information
  B. Identify all the activities, functions and operations that can be attributed to the privacy initiatives of an organization
  C. Evaluate the role of corporate function in legal compliance management, its relations with IT, and security functions. Evaluate the role of legal function in compliance matters
  D. Establish a privacy function to address the activities, functions and operations that are required to manage the privacy initiatives
  C. Evaluate the role of corporate function in legal compliance management, its relations with IT, and security functions. Evaluate the role of legal function in compliance matters

• Question 26:

  As a newly appointed Data Protection officer of an IT company gearing up for DSCI's privacy certification, you are trying to understand what data elements are involved in each of the business process, function and if these data elements can be classified as sensitive personal information. What is being accomplished with this effort?

  A. Organization to get "Visibility" over its exposure to sensitive personal information
  B. It is a part of the annual exercise per the organization's privacy policy / processes
  C. Information security controls for confidential information being reviewed
  D. Gathering inputs to restructure privacy function
  A. Organization to get "Visibility" over its exposure to sensitive personal information

• Question 27:

  An entity shall retain personal data only as long as may be reasonably necessary to satisfy the purpose for which it is processed; or with respect to an established retention period. This privacy principle is known as?

  A. Collection Limitation
  B. Use Limitation
  C. Security safeguards
  D. Storage Limitation
  D. Storage Limitation

• Question 28:

  `Map the legal and compliance requirements to each data element that an organization is dealing with in all of its business processes, enterprise and operational functions, and client relationships.' This an imperative of which DPF practice area?

  A. Visibility over Personal Information (VPI)
  B. Privacy Organization and Relationship (POR)
  C. Regulatory Compliance Intelligence (RCI)
  D. Privacy Policy and Processes (PPP)
  D. Privacy Policy and Processes (PPP)

• Question 29:

  In the landmark case _______________ the Honourable Supreme Court of India reaffirmed the status of Right to Privacy as a Fundamental Right under Part III of the constitution.

  A. M. P. Sharma and others vs. Satish Chandra, District Magistrate, Delhi, and others
  B. Maneka Gandhi vs. Union of India
  C. Justice K. S. Puttaswamy (Retd.) and Anr. vs. Union of India And Ors
  D. Olga Tellis vs. Bombay Municipal Corporation
  C. Justice K. S. Puttaswamy (Retd.) and Anr. vs. Union of India And Ors

• Question 30:

  Which of the following statement is incorrect?

  A. Privacy policy may be derived from outcomes of privacy impact assessment
  B. Misuse of personal information available in public domain may be construed as a privacy violation
  C. A privacy policy once framed cannot be changed before the specified review period
  D. None of the Above
  C. A privacy policy once framed cannot be changed before the specified review period