DSCI DCPP DCPP-01 Questions & Answers

• Question 41:

  "Data which cannot be attributed to a particular data subject without use of additional information." Which of the following best describes this statement?

  A. Anonymized Data

  B. Pseudonymized Data

  C. Metadata

  Correct Answer: B

• Question 42:

  Which among the following organizations does not issue a privacy seal?

  A. EuroPriSe

  B. BBBOnline

  C. Transaction Guard

  D. WebTrust

  Correct Answer: C

• Question 43:

  As part of the environment scanning to identify security risks to personal information, which of the following environments would be least relevant for the organization?

  A. Organization's own environment

  B. Service provider's environment

  C. Client's environment

  D. Government agencies' environment which seek lawful access to personal data

  Correct Answer: D

• Question 44:

  As a privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program?

  A. Privacy risk management framework

  B. Records of privacy specific training imparted to the employees handling personal information

  C. Personal information management policy

  D. Records of deployed privacy notices and statements

  Correct Answer: C

• Question 45:

  A non-public document issued by a data controller that directs data processors to adhere to certain privacy principles while processing personal information may be referred to as:

  A. Privacy Policy

  B. Privacy Statement

  C. Privacy Notice

  D. Security Policy

  Correct Answer: C

• Question 46:

  Which of the following could be considered as triggers for updating privacy policy?

  A. Regulatory changes

  B. Privacy breach

  C. Change in service provider for an established business process

  D. Recruitment of more employees

  Correct Answer: A

• Question 47:

  Which of the following activities form part of an organization's Visibility over Personal Information (VPI) initiative, according to DSCI Privacy Framework (DPF??

  A. `Data processing environment' analysis of industry peers

  B. `Data processing environment' analysis of the country

  C. `Data processing environment' analysis of the organization and associated third parties

  D. `Data processing environment' analysis of the organization only

  Correct Answer: D

• Question 48:

  With respect to privacy monitoring and incident management process, which of the below should be a part of a standard incident handling process?

  I. Incident identification and notification

  II. Investigation and remediation

  III. Root cause analysis

  IV.

  User awareness training on how to report incidents Please select the correct option:

  A.

  I and II

  B.

  III and IV

  C.

  I, II and III

  D.

  All of the above

  Correct Answer: C

• Question 49:

  Which of the following has not been prescribed as a key principle in the White Paper on Data Protection Framework for India, by Justice Shri Krishna Committee?

  A. Informed consent

  B. Data minimization

  C. Horizontal application

  D. Preventing harm

  Correct Answer: C

• Question 50:

  As per GDPR, in case a data controller or processor does not have an establishment within EU, then:

  A. GDPR does not apply to such controllers or processors

  B. They need to set up an establishment in the EU

  C. They shall verbally communicate the presence of a representative to the supervisory authority

  D. Such controllers or processors need to designate a representative in writing to the Union

  Correct Answer: C