DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 141:

  Company A collects and stores information from people X and Y on behalf of company B. Which of the following statements are true?

  A. A is the data controller since it collects data directly from X and Y
  B. B is the data controller while A is the sub processor as B has outsourced the data collection and processing to A
  C. B is the data controller that uses A as data processor to collect and process data of data subjects X and Y
  D. Both A and B are data controllers since both need to maintain highest principles of data protection
  C. B is the data controller that uses A as data processor to collect and process data of data subjects X and Y

• Question 142:

  In which of the following stages of the personal information life cycle, should the security aspects be considered?

  1.

  Collection

  2.

  Maintenance

  3.

  Distribution

  4.

  Disposition

  A. 1,2 and 3
  B. 2, 3 and 4
  C. 2 and 3
  D. 1,2,3 and 4
  B. 2, 3 and 4

• Question 143:

  Following aspects can serve as inputs to a privacy organization for ensuring privacy protection:

  I. Privacy related incidents detected/reported

  II. Contractual obligations

  III. Organization's exposure to personal information

  IV.

  Regulatory requirements

  A. I, II and III
  B. II and IV
  C. I, II, III and IV
  D. None of the above, as privacy and compliance protection mechanisms are evolved based only on organization's privacy policies and procedures
  I. Privacy related incidents detected/reported II. Contractual obligations III. Organization's exposure to personal information IV. Regulatory requirements
  C. I, II, III and IV

• Question 144:

  Which of the following is not required by an organization in US, resorting to EU-US Safe Harbor provisions, to transfer personal information from EU member nation to US?

  A. Adherence to the seven safe harbor principles
  B. Disclose their privacy policy publicly
  C. Sign standard contractual clauses with data exporters in EU
  D. Notify FTC of the self-certification
  B. Disclose their privacy policy publicly

• Question 145:

  Anonymity networks and platforms for Privacy Preferences Project (P3P) are generally _________.

  A. Privacy-enhancing tools and technologies to mask data
  B. Web based privacy-enhancing technologies
  C. Network based privacy-enhancing technologies
  D. Both "Privacy-enhancing tools and technologies to mask data" and "Web based privacy-enhancing technologies"
  D. Both "Privacy-enhancing tools and technologies to mask data" and "Web based privacy-enhancing technologies"

• Question 146:

  Under which of the following conditions can a government department refuse to release information under the provisions of RTI Act?

  A. Adverse impact of such information on the stability of the ruling party in government
  B. Adverse impact of such information on national security
  C. Adverse impact of such information on personal privacy of its officials if it does not satisfy the public interest at large
  D. Adverse impact of such information on the public image of the government department
  B. Adverse impact of such information on national security

• Question 147:

  Which of the following does not fall under the category of Personal Financial Information (PFI)?

  A. Credit card number with expiry date
  B. Bank account Information
  C. Loan account Information
  D. Income tax return file acknowledgement number
  D. Income tax return file acknowledgement number

• Question 148:

  A privacy lead assessor assessing your company for DSCI's privacy certification gets to know that your payroll process has been outsourced to a third party service provider. So, he/she is reviewing your contract with that service provider to ascertain which privacy related clauses are incorporated in the contract.

  What could be the possible reasons for reviewing the contract?

  A. Possible violation of `Collection Limitation'
  B. Possible violation of `Use Limitation'
  C. Risk of data subjects directly reaching to service provider
  D. Data security controls in third party provider's environment
  A. Possible violation of `Collection Limitation'

• Question 149:

  In the landmark case _____________________ the Honourable Supreme Court of India reaffirmed the status of Right to Privacy as a Fundamental Right under Part III of the constitution.

  A. M. P. Sharma and others vs. Satish Chandra, District Magistrate, Delhi, and others
  B. Maneka Gandhi vs. Union of India
  C. Justice K. S. Puttaswamy (Retd.) and Anr. vs. Union of India And Ors
  D. Olga Tellis vs. Bombay Municipal Corporation
  A. M. P. Sharma and others vs. Satish Chandra, District Magistrate, Delhi, and others

• Question 150:

  A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy.

  What all should the company include in its privacy policy to address the raised concerns?

  A. The purpose of collection of personal data
  B. The principle of presumed consent for data disclosure to avail benefits
  C. Information about how personal information is processed and used, specifically
  D. Contact details of Law Enforcement Agencies (LEA) to whom information is disclosed
  C. Information about how personal information is processed and used, specifically