DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 91:

  As per GDPR, by means of an intra group scheme, an organization can offer sufficient data protection safeguards and put in place data transfer arrangements within their organization and some of their establishments which are located outside the EU/EEA to enable transfer of personal data outside the region.

  This internal code of transfer is known as _______.

  A. Company Code of Conduct
  B. Binding Corporate Rules
  C. Standard Contractual Clauses
  D. Binding Transfer Rules
  B. Binding Corporate Rules

• Question 92:

  Which of the following is not a driver for increased privacy-related concerns and subsequent regulatory responses from various governments around the world?

  A. Outsourcing and trans-border data flows in globalized world
  B. Increasing economic value of personal information
  C. Rising demand of data privacy professionals
  D. Phenomenal rise in use of social networking sites, where a lot of personal information is shared with others
  D. Phenomenal rise in use of social networking sites, where a lot of personal information is shared with others

• Question 93:

  Please select the incorrect statement in context of "Online Privacy":

  A. A person's act of `Selective disclosure" (of themselves) in an online environment
  B. A person's concern over usage of information that were collected during an online activity
  C. A person's control over collection of information during an online activity
  D. A person's concern on the software licensing agreement they sign with any organization
  C. A person's control over collection of information during an online activity

• Question 94:

  Which of the following parameters should ideally be addressed by a privacy program of an organization?

  A. Privacy incident response plan and grievance handling
  B. Environmental security concerns
  C. Training and data classification
  D. Intellectual Property (IP) protection
  C. Training and data classification

• Question 95:

  XYZ is a successful startup that acquired a respectable size and scale of operations in last 3 years, handling business process services for small and medium scale enterprises, largely in US and Europe. They are at the stage of closing a deal with a new banking client and working out the details of privacy related obligations in contract. Ensuring effective enforcement of which of the below listed privacy principles is client's accountability, even after outsourcing its loan approval process to XYZ?

  I. Notice

  II. Choice and Consent

  III. Collection Limitation

  IV.

  Use Limitation

  V.

  Access and Correction

  VI. Security

  VII.

  Disclosure to third Party

  Please select the correct set of principles from below listed options:

  A. None of the above, since they are outsourcing the work to XYZ who will carry the liability going forward
  B. All except V and VI
  C. All except III
  D. All of the above listed privacy principles
  I. Notice II. Choice and Consent III. Collection Limitation IV. Use Limitation
  C. All except III

• Question 96:

  In 2006 the Council of Europe launched Data Protection Day to be celebrated each year on 28 January, to commemorate Council of Europe's data protection convention, better known as "Convention ______________".

  A. 108
  B. 101
  C. 207
  D. 166
  A. 108

• Question 97:

  Rashmi recently started working as a customer care representative for a bank. After receiving a customer complaint over the phone, she wrote an email to send to grievance department in the bank. The email included customer's full name, bank account number, residential address, email address and contact number. She picked 2-3 resources/employees from the intranet site of the bank, which belonged to the grievance department and sent the email.

  Please select the most ideal scenario from a privacy point of view?

  A. Rashmi should have included some of the customer information in the email and send to grievance team.
  B. Rashmi did the right thing by sharing all customer details to parties identified from company intranet.
  C. Rashmi should have ascertained who in the grievance team is/are authorized to handle the complaint request and only then should have sent the customer details to the concerned person(s).
  D. none of the above
  A. Rashmi should have included some of the customer information in the email and send to grievance team.

• Question 98:

  Which of the following doesn't contribute, or contributes the least, to the growing data privacy challenges in today's digital age?

  A. Social media
  B. Mass surveillance
  C. Use of secure wireless connections
  D. Increase in digitization of personal information
  A. Social media

• Question 99:

  In the history of human evolution, erection of walls and fences around one's living spaces is interpreted as arrival of which type of privacy consciousness?

  A. Data privacy
  B. Physical privacy
  C. Organizational privacy
  D. Communication privacy
  D. Communication privacy

• Question 100:

  In India, who among the following would be the authorized legal entities to monitor and intercept communication of individuals?

  A. "Intermediaries" as defined under the IT (Amendment) Act, 2008
  B. Telecom Service Providers
  C. Intelligence and Law Enforcement Agencies
  D. Directorate of Revenue Intelligence (DRI)
  B. Telecom Service Providers