DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 41:

  For a third country, a territory or one or more specified sectors within that third country, or an international organization to be granted an adequacy decision under EU GDPR. The law of that region must be:

  A. Identical to EU GDPR
  B. Should match essential elements to provide protection
  C. None of the above
  C. None of the above

• Question 42:

  Which of the following is outside the scope of an organization's privacy incident management plan?

  A. Detection of leakage of personal information
  B. Defining data access rules for business users
  C. Communication of privacy incidents
  D. Remediation of incidents
  C. Communication of privacy incidents

• Question 43:

  XYZ Inc of USA has setup a captive back office operations center in India. The captive is registered as a separate legal entity by the name XYZ India Private Limited and provides services only to XYZ Inc by catering its technology support needs. During the process of providing services, the Indian entity does not receive any customer information of the XYZ Inc. However, information such as financial information and biometric information etc. of the employees of XYZ India is

  shared with the XYZ Inc.

  What necessary steps need to be taken before actual sharing of the aforesaid information happens?

  1.

  Seek consent from the employees of XYZ India before sharing the information;

  2.

  A lawful contract between the XYZ Inc and XYZ India regarding the terms of sharing and data protection measures to be taken, with the obligation on XYZ Inc of not sharing the received information further without permission from Indian entity;

  3.

  The XYZ Inc should agree to provide better or at-par level of data protection as prescribed in the IT (Amendment) Act, 2008;

  4.

  The country in which the XYZ Inc is located should ensure better or same level of data protection as prescribed in the IT (Amendment) Act, 2008

  A. 1 and 2
  B. 1, 2 and 3
  C. 2 and 3
  D. 1 and 4
  C. 2 and 3

• Question 44:

  As per Article 33 of GDPR, in case of a personal data breach, the data controller has to inform the supervisory authority within ___________ of becoming aware of the breach.

  A. 48 hours
  B. 14 days
  C. 72 hours
  D. 24 hours
  C. 72 hours

• Question 45:

  A ___________ is typically provided at the time of PI collection from the data subject.

  A. Notice
  B. Warning
  C. Warranty
  D. Disclaimer
  D. Disclaimer

• Question 46:

  Companies based in EU and willing to transfer data outside the EU/EEA, use model contracts as an instrument. Which of the following statements are true in reference to above statement?

  A. It is a requirement mentioned in EU Data Protection Directive
  B. It is a requirement mentioned in the OECD Privacy Framework
  C. It is a requirement mentioned in the EU E-Commerce Directive
  D. None of the above
  D. None of the above

• Question 47:

  ____________ is used to identify and reduce privacy risks by analyzing that is processed by the entity and the policies in place to protect the data.

  A. Privacy Impact Assessment
  B. Anonymization
  C. Threat Hunting
  D. Minimization
  A. Privacy Impact Assessment

• Question 48:

  Which among the following organizations does not issue a privacy seal?

  A. EuroPriSe
  B. BBBOnline
  C. Transaction Guard
  D. WebTrust
  C. Transaction Guard

• Question 49:

  Which one of the following is considered as the first step of evolution in the formation of today's concept of privacy?

  A. Fundamental civil liberty
  B. Universal declaration of human rights
  C. Right to be left alone
  D. OECD Privacy Principles
  C. Right to be left alone

• Question 50:

  To establish a privacy organization structure in a bank, which one of the following is least practiced by the industry for the positioning of privacy organization?

  A. Privacy reporting to the Chief Information Officer (CIO)
  B. Privacy reporting to the Chief Risk Officer (CRO)
  C. Privacy reporting to corporate communication function
  D. Privacy reporting to legal function
  A. Privacy reporting to the Chief Information Officer (CIO)