DSCI DCPLA Online Practice Questions and Exam Preparation

DSCI DCPLA Online Questions & Answers

• Question 61:

  __________ layer of the DSCI Privacy Framework (DPF? ensures that adequate level of awareness exists in an organization.

  A. Personal Information Security
  B. Information Usage, Access, Monitoring and Training
  C. Privacy Strategy and Processes
  D. None of the above
  B. Information Usage, Access, Monitoring and Training

• Question 62:

  Which of the following mechanisms can be used to transfer personal data outside of a country?

  A. Binding corporate rules
  B. Adequacy decision
  C. Standard contractual clauses
  D. All of the above
  D. All of the above

• Question 63:

  Arrange the following techniques in decreasing order of the risk of re-identification:

  I) Pseudonymization II) De-identification III) Anonymization

  A. I, II
  B. III, II, I
  C. II, III, I
  D. All have equal risk of re-identification
  C. II, III, I

  ---

  Explanation/Reference:

• Question 64:

  Following aspects can serve as inputs to a privacy organization for ensuring privacy protection:

  I) Privacy related incidents detected/reported

  II) Contractual obligations

  III) Organization's exposure to personal information

  IV) Regulatory requirements

  A. I, II and III
  B. II and IV
  C. I, II, III and IV
  D. None of the above, as privacy and compliance protection mechanisms are evolved based only on organization's privacy policies and procedures
  C. I, II, III and IV

• Question 65:

  As a privacy assessor, what would most likely be the first artefact you would ask for while assessing an organization which claims that it has implemented a privacy program?

  A. Privacy risk management framework
  B. Records of privacy specific training imparted to the employees handling personal information
  C. Personal information management policy
  D. Records of deployed privacy notices and statements
  A. Privacy risk management framework

• Question 66:

  Which of the following is not in line with the modem definition of Consent?

  A. Consent is taken by clear and affirmative action
  B. Consenting individual should have the ability to withdraw consent
  C. Consent should be bundled in nature
  D. Purpose of processing should be informed to the individual before consenting
  C. Consent should be bundled in nature

• Question 67:

  As a privacy lead assessor assessing the company for DSCI's privacy certification, you are assessing the adequacy of resources and skills in the organization, to address privacy related responsibilities. Which DSCI Privacy Framework (DPF? practice area is relevant?

  A. Visibility over Personal Information (VPI)
  B. Privacy Organization and Relationship (POR)
  C. Privacy Awareness and Training (PAT)
  D. Information Usage and Access (IUA)
  B. Privacy Organization and Relationship (POR)

• Question 68:

  What is a Data Subject? (Choose all that apply.)

  A. An individual who provides his/her data/information for availing any service
  B. An individual who processes the data/information of individuals for providing necessary services
  C. An individual whose data/information is processed
  D. A company providing PI of its employees for processing
  E. An individual who collects data from illegitimate sources
  A. An individual who provides his/her data/information for availing any service
  C. An individual whose data/information is processed

• Question 69:

  The method of personal data usage in which the users must explicitly decide not to participate.

  A. Opt-In
  B. Opt-out
  C. Data mining
  D. Data matching
  B. Opt-out

• Question 70:

  Which of the following activities form part of an organization's Visibility over Personal Information (VPI) initiative, according to DSCI Privacy Framework (DPF??

  A. `Data processing environment' analysis of industry peers
  B. `Data processing environment' analysis of the country
  C. `Data processing environment' analysis of the organization and associated third parties
  D. `Data processing environment' analysis of the organization only
  C. `Data processing environment' analysis of the organization and associated third parties