DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 21:

  Which one of the following methods for obtaining consent will be unacceptable under the General Data Protection Regulation, 2016?

  A. Verbal Agreement
  B. Opt-in Tick Box
  C. Written Agreement
  D. Pre-Ticked Boxes
  A. Verbal Agreement

• Question 22:

  With respect to privacy governance, which of the following statements are correct?

  A. Privacy governance defines the specifications for privacy operations performed on data processed through computer resource only.
  B. Privacy governance provides privacy strategy and direction, and takes decisions on key privacy issues.
  C. Privacy governance addresses day-to-day privacy incidents with processes established by privacy policies and procedures.
  D. Privacy governance ensures that privacy issues are not left unaddressed in the organization.
  B. Privacy governance provides privacy strategy and direction, and takes decisions on key privacy issues.

• Question 23:

  Where consent is used as a ground of processing under GDPR, when must it be explicit in nature?

  A. For processing for all personal data
  B. For processing of sensitive personal data
  C. Processing for marketing purposes
  D. for transfer of personal data outside the EU
  B. For processing of sensitive personal data

• Question 24:

  A non-public document issued by a data controller that directs data processors to adhere to certain privacy principles while processing personal information may be referred to as:

  A. Privacy Policy
  B. Privacy Statement
  C. Privacy Notice
  D. Security Policy
  C. Privacy Notice

• Question 25:

  While transferring personal data from an EU member nation to a third country which is not deemed adequate as per EU's assessment, which of the following step is not relevant?

  A. Signing of model contractual clauses
  B. Notifying or taking approval from the Data Protection Authority
  C. Assessing the appropriateness of safeguards and measures adopted by the importing organization commensurate to the sensitivity of data being transferred
  D. Harmonizing data protection legislations between the two geographies
  C. Assessing the appropriateness of safeguards and measures adopted by the importing organization commensurate to the sensitivity of data being transferred

• Question 26:

  "The adequacy agreement between EU and Japan is the first ever mutual adequacy decision under EU GDPR". Is this statement True or False?

  A. True
  B. False
  A. True

• Question 27:

  The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or Information) Rules, 2011, provide the consumer with which of the following rights?

  A. Right to Access and Correction
  B. Right to Erasure
  C. Right to Data Portability
  D. Right to restrict processing
  E. All of the above
  C. Right to Data Portability

• Question 28:

  As a privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program?

  A. Privacy risk management framework
  B. Records of privacy specific training imparted to the employees handling personal information
  C. Personal information management policy
  D. Records of deployed privacy notices and statements
  C. Personal information management policy

• Question 29:

  A country should allow its citizens to access specific information owned by the government in order to bring transparency in the government administration processes. This is the basis for formulation of which of the following rights in India?

  A. Right to Privacy Act
  B. Right to Information Act
  C. Right to Freedom of Speech and Expression
  D. Right to Social Security
  B. Right to Information Act

• Question 30:

  A Privacy Impact Assessment (PIA) should ideally accomplish which of the following goals?

  A. To determine the risks and effects of collecting, storing and distributing personal information
  B. To evaluate processes for handling personal information for mitigating potential privacy risks
  C. To acknowledge the organization's role in collecting personal identifiable information
  D. To comply with ISO 27001:2013 standard
  B. To evaluate processes for handling personal information for mitigating potential privacy risks