DCPP-01 Exam Training Practice Tests (DSCI certified Privacy Professional (DCPP))]

Question 1

A ministry under government of India plans to collect citizens' information related to their education, medical condition, economic status, caste and religion. As per the privacy requirements mentioned under Sec 43A of IT (Amendment) Act, 2008, the citizens' 'Consent' would be mandatory for which of the following elements before their collection?

A. Sec 43A may not be applicable B. Educational records C. Caste and religion D. Medical condition

Correct Answer: D

Question 2

Which among the following is the Canadian privacy law?

A. IT Act of Canada B. COPPA C. HIPAA D. PIPEDA

Correct Answer: D

Question 3

Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:

A. User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability B. User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability C. User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction D. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

How does the APEC privacy framework differ from the EU Data Protection Directive in the following way?

A. Personal information is not covered by the APEC privacy framework B. APEC provides no regulations on e-commerce C. Members of APEC do not cooperate with each other in the enforcement of privacy laws D. As part of APEC, member countries do not need to sign binding treaties or directives on privacy

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

It is essential for an entity to comply with US requirements if it operates a website designed for kids or a website for general audiences that gathers information from individuals known to be under 13 years old. Which of the below regulations is applicable?

A. Sarbanes-Oxley Act, 2000 B. Personal Information Protection and Electronic Documents Act (PIPEDA) C. Gramm-Leach-Bliley Act, 1999 D. Child online protection Act, 1998

Correct Answer: D

Question 6

Which of the following does not fall under the category of Personal Financial Information (PFI)?

A. Credit card number with expiry date B. Bank account Information C. Loan account Information D. Income tax return file acknowledgement number

Correct Answer: D

Question 7

Privacy enhancing tools aim to allow users to take one or more of the following actions related to their personal data that is sent to, and used by online service providers, merchants or other users:
i. Increase control over their personal data
ii. Choose whether to use services anonymously or not
iii. Obtain informed consent about sharing their personal data
iv. Opt-out of behavioral advertising or any other use of data
Please select correct option from below:

A. All except iii B. All C. Only i D. Only i and ii

Correct Answer: B

Question 8

Under which of the following conditions can a company in India may transfer sensitive personal information (SPI) to any other company or a person in India, or located in any other country?

A. The transfer of information is allowed only after taking approval of DeitY (Department of Electronics & Information Technology) in India B. The transfer of information is allowed only after taking approval of Chief Information Commissioner of India C. Transfer of information is allowed to those who ensure the same level of data protection that is adhered to by the company as provided for under the Indian laws D. The transfer may be allowed only if it is necessary for the performance of the lawful contract or where the data subject has consented to data transfer

Correct Answer: C

Question 9

With respect to 'Data Minimization' privacy principle, please select the correct statements from the following:

A. Data controllers should limit the amount of data collected to what is directly relevant and necessary to accomplish a specified purpose B. Data controllers should retain the data only for as long as is necessary to fulfil the purpose for which it was collected C. Process of analyzing and minimizing the collected data into useful information D. Right to object by the data subject for minimizing the collection of personal information

Correct Answer: D

Question 10

Which of the following legislations/ guidelines do not cover the concept of trans-border data flow?

A. IT (Amendment) Act, 2008 B. OECD C. None of the above D. PIPEDA

Correct Answer: A

DSCI certified Privacy Professional (DCPP) - DCPP-01 Exam Practice Test