DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 1:

  Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

  A. Right to Internet
  B. Privacy
  C. Right to Information
  D. Dispute resolution
  A. Right to Internet

• Question 2:

  Which one of the following methods for obtaining consent will be unacceptable under the General Data Protection Regulation, 2016?

  A. Verbal Agreement
  B. Opt-in Tick Box
  C. Written Agreement
  D. Pre-Ticked Boxes
  A. Verbal Agreement

• Question 3:

  Data Protection Impact Assessment requirement, under GDPR is triggered if the organization is engaged in which of the following activities?

  A. Processing on a large scale of special categories of data
  B. Processing of personal data relating to criminal convictions and offenses
  C. Systematic monitoring of a publicly accessible on a large scale
  D. All the above
  D. All the above

• Question 4:

  Anonymity networks and platforms for Privacy Preferences Project (P3P) are generally _________.

  A. Privacy-enhancing tools and technologies to mask data
  B. Web based privacy-enhancing technologies
  C. Network based privacy-enhancing technologies
  D. Both "Privacy-enhancing tools and technologies to mask data" and "Web based privacy-enhancing technologies"
  D. Both "Privacy-enhancing tools and technologies to mask data" and "Web based privacy-enhancing technologies"

• Question 5:

  Following aspects can serve as inputs to a privacy organization for ensuring privacy protection:

  I. Privacy related incidents detected/reported

  II. Contractual obligations

  III. Organization's exposure to personal information

  IV.

  Regulatory requirements

  A. I, II and III
  B. II and IV
  C. I, II, III and IV
  D. None of the above, as privacy and compliance protection mechanisms are evolved based only on organization's privacy policies and procedures
  I. Privacy related incidents detected/reported II. Contractual obligations III. Organization's exposure to personal information IV. Regulatory requirements
  C. I, II, III and IV

• Question 6:

  A newly appointed Data Protection officer is reviewing the organization's existing privacy policy. Which of the following would be the most critical factor for the review process?

  A. Awareness of the business units about the privacy policy
  B. Changes in the legal/regulatory regime
  C. Privacy policies of industry peers
  D. Foreseeable challenges in the effective implementation of the policy
  D. Foreseeable challenges in the effective implementation of the policy

• Question 7:

  There are several privacy incidents reported in an organization. The organization plans to analyze and learn from these incidents. Which privacy practice will the organization have to implement for the same?

  A. Information usage and access
  B. Privacy contract management
  C. Privacy awareness and training
  D. Privacy monitoring and incident management
  D. Privacy monitoring and incident management

• Question 8:

  Data Protection officer is reviewing the organization's existing privacy policy. Which of the following would be the most critical factor for the review process?

  i. Policy definition

  ii. Policy enforcement

  iii. IT infrastructure setup

  iv.

  Physical infrastructure setup

  A. Only i.
  B. Only i. and ii.
  C. i, ii, iii and iv.
  D. i, ii and iii
  D. i, ii and iii

• Question 9:

  A Business Process Management (BPM) organization based in India, has many domestic clients. The organization observes that one of its domestic clients does not appreciate the value of customers' personal information and have a lot of system loop holes that can be exploited to breach privacy of its customers. The contract signed with the said client makes the BPM organization 100% liable for privacy breaches. The BPM organization has paid close to $10,000 in fines as penalty to the said client in the past. The privacy office has highlighted the risk to the senior management of the BPM organization. What is the best possible approach that the BPM organization can take to resolve this issue?

  A. Escalate the issue to client's management, and cancel the contract with the client if they do not stop penalizing the company for the privacy breaches
  B. Take strict actions against individuals committing the breach of privacy, including taking them to court in India via the available channels
  C. Conduct a proactive risk assessment of client's business processes, and associated IT systems ?present the risk management report to the client, and request for change of contract terms to amend the liability clause.
  D. None of the above
  C. Conduct a proactive risk assessment of client's business processes, and associated IT systems ?present the risk management report to the client, and request for change of contract terms to amend the liability clause.

• Question 10:

  Which of the following term is commonly used to refer to a solution that protects users' right to choose whether their activities can be monitored by third-party websites or not:

  A. Do not Disturb
  B. Do not Record
  C. Do not Track
  D. Do not Follow
  C. Do not Track