Practice DCPP-01 Exam Online

Question 1

Health insurance firm based in the US uses BPM services provided by an Indian company. It was found that one of the employees of the Indian company exported customer data of the insurance company to another US-based insurance company. Under which of the below ground, the company and its executives in India were also subjected to legal action ?

A : These actions were not avoided by using data loss prevention tools.

B : No reasonable security practices were implemented to protect data.

C : Employees of the company were allowed to view sensitive personal information.

D : Background checks were not conducted on the individuals.

Answer: B

Question 2

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

A : User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability

B : User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

C : User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction

D : User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Answer: B

Question 3

Which of the following provides the legal basis for an Adjudicating Officer in every Indian state & union territory, with the powers of a civil court, to hear complaints and order compensation to the affected individuals?

A : Indian Civil Code

B : Indian Criminal Procedure Code

C : Telecom Regulatory Authority of India (TRAI) Act

D : Information Technology Act, 2000 & Information Technology (Amendment) Act, 2008

Answer: A

Question 4

Under GDPR, the European Commission takes the adequacy decision in relation to privacy laws in a third country, territory, sector etc. A subjective approach is taken. For the assessment of whether a third country, a territory, or one or more specific sectors within that third country, or an international organization has an adequate level of protection, who is required to provide an opinion to the Commission?

A : European Data Protection Board

B : Lead Supervisory Authority

C : Article 29 Working Party

D : Convention 108 Council

Answer: A

Question 5

Data processing includes which of the following operations:

A : Collecting

B : Transmitting

C : Storing

D : Disclosing

E : All of the above

Answer: C

Name:	DSCI certified Privacy Professional (DCPP)
Exam Code:	DCPP-01
Certification:	DCPP
Vendor:	DSCI
Total Questions:	208
Last Updated:	Apr 22, 2024

DSCI DCPP-01