DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 31:

  ABC company is a large US based IT Company that provides a range of services to its clients. The company had developed a cloud based application providing end-to-end services for the medical industry. The application had three modules for: -Patients -Hospitals and Doctors -Insurance and Pharmaceutical companies

  Each of the modules was designed to be integrated with others depending on user's choice. For example, a patient could choose to share his/her medical history with his/her doctor (for medical advice) as well as insurance companies (for claims).

  The application requires that all registered users of the application read and acknowledge the privacy policy. Additionally, users are required to identify the purpose for which they are providing any personal data in any of the modules. For example, a patient providing his/her medical history and current symptoms can select ‘Medical AdviceA. iv
  B. i and ii
  C. i, ii and iii
  D. ii and iii

  D. ii and iii

• Question 32:

  Which of the following privacy regulation advocates de-identification of personal information?

  A. EU Data Protection Directive
  B. Canada's PIPEDA
  C. Australia's ANPP
  D. IT Act of India
  A. EU Data Protection Directive

• Question 33:

  A newly appointed Data Protection officer is reviewing the organization's existing privacy policy. Which of the following would be the most critical factor for the review process?

  A. Awareness of the business units about the privacy policy
  B. Changes in the legal/regulatory regime
  C. Privacy policies of industry peers
  D. Foreseeable challenges in the effective implementation of the policy
  D. Foreseeable challenges in the effective implementation of the policy

• Question 34:

  _________________ was passed by the UK parliament to regulate the power of public bodies to carry out surveillance, interception communications and conduct investigations.

  A. Regulation of investigatory Powers Act, 2000
  B. Regulation of Investigation Agencies Act, 2016
  C. Regulation of Interception Procedures Act, 2000
  D. Regulation of Interception and Access Act, 2000
  A. Regulation of investigatory Powers Act, 2000

• Question 35:

  As part of the environment scanning to identify security risks to personal information, which of the following environments would be least relevant for the organization?

  A. Organization's own environment
  B. Service provider's environment
  C. Client's environment
  D. Government agencies' environment which seek lawful access to personal data
  D. Government agencies' environment which seek lawful access to personal data

• Question 36:

  In the context of DSCI Privacy Framework (DPF?, what does PPP stand for?

  A. Public Private Partnership
  B. Privacy Policy and Processes
  C. Personal Privacy and Processes
  D. Private Policy and Procedures
  A. Public Private Partnership

• Question 37:

  As per Article 6 of General Data Protection Regulation, 2016, which of the following is not a lawful ground of processing personal data?

  A. Performance of Contract
  B. Legal Obligation
  C. Legitimate Interest
  D. Consent
  E. Vital Interest
  F. All of them are lawful grounds of processing personal data
  A. Performance of Contract

• Question 38:

  What is the maximum penalty for non-compliance under GDPR?

  A. 10 million euros or 2% of annual global turnover of the organization in the preceding financial year, whichever is greater
  B. 4% of annual revenue or 10 million, whichever is lower
  C. 20 million euros or 4% of global turnover of the organization in the preceding financial year, whichever is greater.
  D. none of the above
  A. 10 million euros or 2% of annual global turnover of the organization in the preceding financial year, whichever is greater

• Question 39:

  Which of the following could be considered as triggers for updating privacy policy?

  A. Regulatory changes
  B. Privacy breach
  C. Change in service provider for an established business process
  D. Recruitment of more employees
  A. Regulatory changes

• Question 40:

  "As per Indian laws, any information that is freely available or accessible in public domain cannot be regarded as sensitive personal data or information." Please state if this statement is True or False.

  A. True
  B. False
  A. True