DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 71:

  If XYZ and Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

  A. Data Processor
  B. Data Controller
  C. Data Subject
  D. Either A or B
  B. Data Controller

• Question 72:

  Which of the following should be the part of the Privacy Policy of any organization?

  A. Applicable Privacy Principles
  B. Contact details of senior management
  C. Definition of Personal Information and associated categories
  D. Details of all the privacy incidents that have occurred in the past
  C. Definition of Personal Information and associated categories

• Question 73:

  An Indian company provides BPM services to a US based health insurance company. One rogue of the employees of the Indian company exported patient data of the customers of the insurance company and provided it to another US based insurance company. Although the employee was charged for theft, the company and its executives also faced legal proceedings in India because (please select the most appropriate possible reason):

  A. They did not conduct background verification of individuals.
  B. They allowed access to sensitive personal information to employees of the company.
  C. They did not implement reasonable security practices for data protection.
  D. They did not implement data loss prevention tools to prevent such actions.
  C. They did not implement reasonable security practices for data protection.

• Question 74:

  Which among the following would not be characteristic of a good privacy notice?

  A. Easy to understand
  B. Clear and concise
  C. Comprehensive ?explaining all the possible scenarios and processing details making the notice lengthy
  D. Multilingual
  A. Easy to understand

• Question 75:

  As per GDPR, in case a data controller or processor does not have an establishment within EU, then:

  A. GDPR does not apply to such controllers or processors
  B. They need to set up an establishment in the EU
  C. They shall verbally communicate the presence of a representative to the supervisory authority
  D. Such controllers or processors need to designate a representative in writing to the Union
  C. They shall verbally communicate the presence of a representative to the supervisory authority

• Question 76:

  _______________ calls for inclusion of data protection from the onset of the designing of systems.

  A. Privacy Safeguarding
  B. Agile Model
  C. Privacy by Design
  D. Logical Design
  C. Privacy by Design

• Question 77:

  From the following list, identify the technology aspects that are specially designed for upholding the privacy:

  i. Data minimization

  ii. Intrusion prevention system

  iii. Data scrambling

  iv.

  Data loss prevention

  v.

  Data portability

  vi. Data obfuscation

  vii. Data encryption

  viii.

  Data mirroring

  Please select the correct set of aspects from below options:

  A. Only i., iii., v., vii. and viii
  B. Only i., ii., iii., vii. and viii
  C. Only i., iii., iv., vi. and vii
  D. Only ii., v., vi., vii. and viii
  C. Only i., iii., iv., vi. and vii

• Question 78:

  Provisions in which of the following legislations in India have or could have a direct conflict with an individual's privacy (though exceptions could have already been defined in the law)?

  A. Right to Information (Amendment) Act, 2013
  B. TheLokPal and LokaYuktas Act, 2013
  C. National Food Security Act, 2013
  D. Official Secrets Act, 1923
  C. National Food Security Act, 2013

• Question 79:

  As a privacy lead assessor assessing the company for DSCI's privacy certification, you are assessing the adequacy of resources and skills in the organization, to address privacy related responsibilities. Which DSCI Privacy Framework (DPF? practice area is relevant?

  A. Visibility over Personal Information (VPI)
  B. Privacy Organization and Relationship (POR)
  C. Privacy Awareness and Training (PAT)
  D. Information Usage and Access (IUA)
  A. Visibility over Personal Information (VPI)

• Question 80:

  ABC Health Care is a large healthcare delivery chain, with 8 hospitals and more than 20 health centers. It has decided to streamline its patient care system. The new system needs to integrate data from more than 20 clinical, scheduling, and billing systems. It needs to support all types of data-intensive projects, which includes masking sensitive health information.

  You have been approached to address privacy concerns during integration of the new system. Arrange the below listed steps in sequential order for the most appropriate implementation of privacy protection measures.

  I. Creating a privacy policy to safeguard the sensitive personal data

  II. Measuring and monitoring privacy policy and processes implementation to provide ongoing proof that data has been protected

  III. Defining and classifying sensitive personal data, including data and metadata patterns

  IV.

  Masking data consistently across the systems to meet various compliance standards

  V.

  Discovering where the sensitive personal data is stored across databases, applications, endpoints and servers Please select the most logical sequence from below options:

  A. II - I - IV -V
  B. V - II - III - I - IV
  C. III - V - I - IV - II
  D. I - III - V - II - IV
  I. Creating a privacy policy to safeguard the sensitive personal data II. Measuring and monitoring privacy policy and processes implementation to provide ongoing proof that data has been protected III. Defining and classifying sensitive personal data, including data and metadata patterns IV. Masking data consistently across the systems to meet various compliance standards
  B. V - II - III - I - IV