DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 151:

  A Data Loss Prevention (DLP) tool identifies a large number of medical records sent by an employee to a personal email address. Which of the following is the most critical consideration while internally investigating this incident?

  A. The domain of the recipient e-mail address
  B. The gender of patients whose records were shared
  C. The time of day the records were sent
  D. The reason the records were emailed
  D. The reason the records were emailed

• Question 152:

  Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

  A. Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws
  B. The transfer of information is allowed only after taking approval of Chief Information Commissioner of India
  C. The transfer of information is allowed only after taking approval of ministry of electronics and information technology
  D. The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer
  A. Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws

• Question 153:

  Complete the sentence: The Gramm-Leach-Bliley Act (GLBA) of US regulates the privacy practices adopted by financial institutions, requiring them to provide adequate security of the customer records. It lays various obligations on the financial institutions but allows such financial institutions to share the non-public information of customers (after properly notifying their consumers in a manner mentioned in the Act) with

  A. Its affiliates only after obtaining explicit consent from the consumers
  B. Its affiliates without need for obtaining explicit consent from the consumers for sharing their data
  C. Its affiliates after disclosure in initial and annual GLBA privacy notices
  D. Its affiliates after obtaining explicit permission of Federal Trade Commission
  A. Its affiliates only after obtaining explicit consent from the consumers

• Question 154:

  A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.

  Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian branches?

  A. Notifying the data subject
  B. Conducting risk assessment for the processing involved
  C. Determining adequacy status of the country
  D. Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission
  D. Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission

• Question 155:

  Which of the following term is commonly used to refer to a solution that protects users' right to choose whether their activities can be monitored by third-party websites or not:

  A. Do not Disturb
  B. Do not Record
  C. Do not Track
  D. Do not Follow
  C. Do not Track

• Question 156:

  There are several privacy incidents reported in an organization. The organization plans to analyze and learn from these incidents. Which privacy practice will the organization have to implement for the same?

  A. Information usage and access
  B. Privacy contract management
  C. Privacy awareness and training
  D. Privacy monitoring and incident management
  D. Privacy monitoring and incident management

• Question 157:

  Which of the following privacy principle deals with informed consent of the data subject before sharing the personal information (of the data subject) to third parties for processing?

  A. Collection limitation
  B. Purpose limitation
  C. Disclosure of information
  D. Accountability
  C. Disclosure of information

• Question 158:

  The Qatar Concerning Privacy and Protection of Personal Data Act, 2016 applies to:

  A. Only personal data that is electronically processed
  B. Only personal data that is manually processed
  C. Personal data that is electronically or manually processed
  A. Only personal data that is electronically processed

• Question 159:

  Data processing includes which of the following operations:

  A. Collecting
  B. Transmitting
  C. Storing
  D. Disclosing
  E. All of the above
  C. Storing

• Question 160:

  On which date is the Data Privacy Day or Data Protection Day celebrated?

  A. 27th January
  B. 28th January
  C. 28th June
  D. 16th November
  B. 28th January