DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 51:

  `Challenging Compliance' as a privacy principle is covered in which of the following data protection/ privacy act?

  A. Federal Data Protection Act, Germany
  B. UK Data Protection Act
  C. PIPEDA
  D. Singapore Data Protection Act
  C. PIPEDA

• Question 52:

  Which of the following has not been prescribed as a key principle in the White Paper on Data Protection Framework for India, by Justice Shri Krishna Committee?

  A. Informed consent
  B. Data minimization
  C. Horizontal application
  D. Preventing harm
  C. Horizontal application

• Question 53:

  An Indian bank plans to improve the authentication mechanism for its banking system by implementing three factor authentication, in which one of the factors is biometric. Which of the following statement is not correct?

  A. Section 43A of IT (Amendment) Act, 2008 will be applicable.
  B. Privacy policy of the bank might need to be revised.
  C. Authorization to be taken from IT Secretary of the respective state or union territory.
  D. Consent for biometric processing needs to be taken from the data subject if not already taken.
  B. Privacy policy of the bank might need to be revised.

• Question 54:

  The _______________ amended PIPEDA to introduce the concept of `valid consent', which elaborates on the existing consent requirements.

  A. Digital Privacy Act, 2015
  B. Data Privacy Act, 2015
  C. Digital Protection Act, 2015
  D. Data Protection Regulation, 2015
  D. Data Protection Regulation, 2015

• Question 55:

  On September 30, 1970 the ever first data protection law, the ______________ Data Protection Act was passed.

  A. Hesse
  B. Copenhagen
  C. Paris
  D. Munich
  D. Munich

• Question 56:

  Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

  A. OECD
  B. IT (Amendment) Act, 2008
  C. PIPEDA
  D. None of the above
  B. IT (Amendment) Act, 2008

• Question 57:

  A Business Process Management (BPM) organization based in India, has many domestic clients. The organization observes that one of its domestic clients does not appreciate the value of customers' personal information and have a lot of system loop holes that can be exploited to breach privacy of its customers. The contract signed with the said client makes the BPM organization 100% liable for privacy breaches. The BPM organization has paid close to $10,000 in fines as penalty to the said client in the past. The privacy office has highlighted the risk to the senior management of the BPM organization. What is the best possible approach that the BPM organization can take to resolve this issue?

  A. Escalate the issue to client's management, and cancel the contract with the client if they do not stop penalizing the company for the privacy breaches
  B. Take strict actions against individuals committing the breach of privacy, including taking them to court in India via the available channels
  C. Conduct a proactive risk assessment of client's business processes, and associated IT systems ?present the risk management report to the client, and request for change of contract terms to amend the liability clause.
  D. None of the above
  C. Conduct a proactive risk assessment of client's business processes, and associated IT systems ?present the risk management report to the client, and request for change of contract terms to amend the liability clause.

• Question 58:

  Rising economic value of personal information has stressed the need for a comprehensive __________ legislation in India.

  A. Right to Internet
  B. Privacy
  C. Right to Information
  D. Dispute resolution
  A. Right to Internet

• Question 59:

  Which of the following statements is true with respect to organization's privacy training and awareness program?

  A. Should define roles and responsibilities of personnel in privacy function
  B. Should cover employees of service provider dealing with personal information
  C. Should necessarily cover official from Law Enforcement Agencies that request lawful access to personal information
  D. None of the above
  A. Should define roles and responsibilities of personnel in privacy function

• Question 60:

  Vijay was part of the core marketing team from last five years in a financial organization A. This year, he left the organization and moved into a new organization B providing similar products and services as organization A. Vijay used contact details of some of the customers of organization A, leveraging his friends in Organization A. He used them to provide services of Organization B, hence overall benefitting the Organization B, without informing Organization B about the source of contact details. Customers were satisfied too from the service of Organization B.

  Which of the following statements could be correct?

  A. Organization A is at fault because it failed to stop Vijay from accessing contact details of its customers through its current employees.
  B. Organization B is at fault because it used contacts details provided by Vijay, without ensuring whether data subject's consent was taken or not.
  C. Vijay is at fault because he has breached privacy of Organization A by obtaining information through illegitimate means.
  D. No one because customers were satisfied from the product and service they received.
  C. Vijay is at fault because he has breached privacy of Organization A by obtaining information through illegitimate means.