DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 131:

  Section 43A of the Information Technology (Amendment) Act, 2008 holds ___________ accountable for having reasonable security practices and procedures in place to protection sensitive personal data.

  A. Government
  B. Body Corporates
  C. Government and body corporates alike
  D. none of the above
  A. Government

• Question 132:

  DataCol technologies is a technology company specializing in providing Healthcare IT solutions. DataCol has recently developed a mobile app to collect data specific to healthcare. The app also helps in collating and classifying the data

  based on customizable parameters. National Center for Disease Statistics (NCDS) decides to pilot this app and provide it to the agencies who collect data such as health status, immunization status, known health problems etc. from various

  communities and classify it as per guidelines from NCDS.

  What is the role of agencies collecting data in this scenario?

  A. Data Controller
  B. Data Processor
  C. Data Subject
  D. Sub Processor
  B. Data Processor

• Question 133:

  A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.

  For exporting EU branch employees' data to Asian Countries for processing, which of the following instruments could be used for legal data transfer?

  A. Customized contracts mandating ISO 27001 certification by the data processor
  B. Standard Contractual Clauses
  C. Binding Corporate Rules
  D. Privacy Shield Framework
  D. Privacy Shield Framework

• Question 134:

  When an individual has choice to decide on who else can have access to their personal information, it is called

  A. Information Privacy
  B. Physical Privacy
  C. Social Privacy
  D. Psychological Privacy
  A. Information Privacy

• Question 135:

  With reference to APEC privacy framework, which of the following statements are true?

  A. The APEC Privacy Framework is intended to promote a flexible approach to information privacy protection across APEC members, while at the same time avoiding the creation of needless barriers to information flows.
  B. The APEC framework is detailed and prescribes stringent controls that need to be implemented for trans-border data flows to initiate.
  C. Companies can be certified by attested third parties for compliance to requirements mentioned under APEC Privacy Framework.
  D. Governments which are part of the APEC, authorize data transfer as per APEC privacy framework.
  A. The APEC Privacy Framework is intended to promote a flexible approach to information privacy protection across APEC members, while at the same time avoiding the creation of needless barriers to information flows.

• Question 136:

  With respect to privacy notice, what are the responsibilities of data controller?

  A. Providing the notice before or during data collection
  B. Identifying and communication the purposes for which data will be collected, used, and disclosed
  C. Providing notice after the data collection
  D. Providing notice at every instance of data processing
  B. Identifying and communication the purposes for which data will be collected, used, and disclosed

• Question 137:

  Rakesh is leading a project to develop a wellness products website wherein customers can find product information, perform product comparison, and provide reviews. In order to purchase, compare and review the products, customers are required to register on the site. Rakesh and team have come up with a lengthy registration form with all the fields marked as mandatory, though all not required for the primary purpose. As a privacy professional, what is your observation?

  A. Rakesh is not violating anything, as the data collected can be used for targeted advertisements
  B. Rakesh is collecting additional information as it can be used to assist Law Enforcement Agencies at later stage
  C. Rakesh is proactive and efficient by collecting more data than required for the future purposes for organizations' benefits
  D. Rakesh should collect minimum information required only for primary business purpose
  D. Rakesh should collect minimum information required only for primary business purpose

• Question 138:

  For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

  A. Rs. 50,000,000
  B. Rs. 500,000,000
  C. Rs. 5,000,000
  D. Upper limit not defined
  D. Upper limit not defined

• Question 139:

  According to The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or Information) Rules, 2011, which of the following does not fall under the category of Sensitive Personal Data or Information?

  A. Sexual orientation
  B. Password
  C. Medical records and history
  D. Religious Beliefs
  B. Password

• Question 140:

  As per GDPR, the adequacy decision is taken the European Commission based on its findings and assessment of privacy laws of the third country, territory, sector, etc. The ____________ is required to provide the Commission with an opinion for the assessment of the adequacy of the level of protection in a third country or international organization, including for the assessment whether a third country, a territory or one or more specified sectors within that third country, or an international organization.

  A. European Data Protection Board
  B. Article 29 Working Party
  C. Lead Supervisory Authority
  D. Convention 108 Council
  A. European Data Protection Board