DSCI DCPP-01 Online Practice Questions and Exam Preparation

DSCI DCPP-01 Online Questions & Answers

• Question 81:

  A US IT company has created a cloud based application for Canadian consumers only, with servers located in Vancouver, Canada. The application allows its users to publish their short stories, essays or e-books. The purpose of the application, i.e. literary work, is clearly stated in the terms and conditions which are mandatorily acknowledged by each user.

  With respect to this application, the company must ensure compliance with:

  A. PIPEDA
  B. US Consumer Privacy Bill of Rights
  C. EU Data Protection Directive
  D. None of the above
  D. None of the above

• Question 82:

  Indian constitution does not expressly provide for the "right to privacy" to its citizens. However, there were various judicial pronouncements of the apex court which finally established the "right to privacy" as a fundamental right subsumed under Article 21 of the constitution of India. Article 21 inter alia provides and protects the __________________.

  A. Right to Life and Personal liberty
  B. Right to Opportunity
  C. Right to Freedom of Speech and Expression
  D. Right to Equality before law
  A. Right to Life and Personal liberty

• Question 83:

  Which of the following laws does not have a mandatory personal data breach notification requirement?

  A. General Data Protection Regulation, 2016
  B. Information Technology (Amendment) Act, 2008
  C. Japanese Act on the Protection of Personal Information
  D. UK Data Protection Act, 2018
  B. Information Technology (Amendment) Act, 2008

• Question 84:

  A global Business Process Management (BPM) organization based in India, headquartered in the US is in receipt of a Request for Proposal (RFP) for a potential deal. The privacy function in this company has just got formulated. Which of the following stage would be most effective for sales team to involve privacy function?

  A. RFP response stage
  B. Post-RFP stage once the BPM organization is selected as one of the potential service providers
  C. During service provider evaluation stage based on RFP response, and face-to-face reviews of the service provider
  D. During contract negotiation stage
  D. During contract negotiation stage

• Question 85:

  You are part of a team that has been created by Indian government to create India's privacy law based on recommendations in Justice AP Shah's Report. Which of the following provisions should be addressed in the law?

  A. Privacy as an explicit fundamental constitutional right
  B. Offences, penalties and remedies
  C. National privacy principles
  D. Setup of a national data controller registry
  C. National privacy principles

• Question 86:

  General Data Protection Regulation, 2016 applies to processing of personal data of natural persons that are:

  A. EU Citizens
  B. EU Residents
  C. None of the above
  A. EU Citizens

• Question 87:

  Which of the following statement about Personally Identifiable Information (PII) is true?

  A. PII is necessarily a single data element, not a combination of data elements, which can uniquely identify an individual
  B. PII is a subset of Sensitive Personal Information
  C. PII is any information about a legal entity including details of its registration or any information that may allow its easy identification
  D. None of the above
  C. PII is any information about a legal entity including details of its registration or any information that may allow its easy identification

• Question 88:

  Which among the following countries has not been granted adequacy status by EU authorities, so far?

  A. Brazil
  B. Argentina
  C. Canada
  D. New Zealand
  A. Brazil

• Question 89:

  Choose the correct grouping of privacy principles into user centric (requiring data subjects' involvement) and organization centric (confined to organization processes and procedures) from the following options:

  A. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability
  B. User Centric: Consent, Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Openness, Accountability
  C. User Centric: Notice, Consent, Choice, Access and Correction Organization Centric: Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability
  D. User Centric: Notice, Consent, Openness, Accountability Organization Centric: Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access and Correction
  A. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

• Question 90:

  What are the roles an organization can play from privacy perspective?

  i. Data Controller A. i, ii and iii
  B. ii, iii and iv
  C. i, iii and iv
  D. i, ii, iii and iv

  A. i, ii and iii