最新のDCPP-01問題集で試験を準備する

DSCI DCPP-01 試験概要:

DSCI DCPP-01 試験シラバストピック:

DSCI certified Privacy Professional (DCPP) 認定 DCPP-01 試験問題：

1. A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.
For exporting EU branch employees' data to Asian Countries for processing, which of the following instruments could be used for legal data transfer?

A) Safe Harbor
B) Standard Contractual Clauses
C) Customized contracts mandating ISO 27001 certification by the data processor
D) Binding Corporate Rules

2. Which type of data qualify as Sensitive Personal Data or Information under Section 43A of IT (Amendment) Act, 2008?

A) Call Data Records (CDRs)
B) Sexual orientation
C) Religion and caste
D) Political affiliation

3. It is essential for an entity to comply with US requirements if it operates a website designed for kids or a website for general audiences that gathers information from individuals known to be under 13 years old. Which of the below regulations is applicable?

A) Child online protection Act, 1998
B) Personal Information Protection and Electronic Documents Act (PIPEDA)
C) Sarbanes-Oxley Act, 2000
D) Gramm-Leach-Bliley Act, 1999

4. For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________

A) Rs. 500,000,000
B) Rs. 5,000,000
C) Rs. 50,000,000
D) Upper limit not defined

5. XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

A) Yes, in the language such women would understand
B) No, since the law does not require the same in this case
C) Yes, in the any language as per the wishes of said hospital
D) No, since it is a free checkup camp for their welfare

質問と回答：