最新的DSCI DCPP-01免費考試真題

問題1

If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:

A. Data Controller

B. Either A or B

C. Data Subject

D. Data Processor

正確答案: A

問題2

A Privacy Impact Assessment (PIA) should ideally accomplish which of the following goals?

A. To evaluate processes for handling personal information for mitigating potential privacy risks

B. To acknowledge the organization's role in collecting personal identifiable information

C. To determine the risks and effects of collecting, storing and distributing personal information

D. To comply with ISO 27001:2013 standard

正確答案: A

問題3

Who should be designated as a grievance officer in IT (Amendment) Act, 2008 to redress grievance(s) from information providers?

A. Processor of data

B. An individual sharing his/her information

C. A third party agency collects personal information

D. An organization that determines the means and purposes of data processing

正確答案: D

問題4

XYZ & Co., an Indian hospital specialized in dealing with cancer treatment has organized a free health checkup camp for women in a specific district, after seeking due permission from competent authorities. During the camp the hospital staffs will be feeding the medical records of these women into the computer connected to hospital network system. Does the said hospital need to notify its privacy policy to the women attending the camp and seek their consent regarding the collection and processing of such information?

A. Yes, in the any language as per the wishes of said hospital

B. No, since it is a free checkup camp for their welfare

C. Yes, in the language such women would understand

D. No, since the law does not require the same in this case

正確答案: A

問題5

According to the IT (Amendment) Act, 2008, a corporate entity could be liable to pay compensation for negligence in implementing and maintaining reasonable security practices and procedures in order to protect Sensitive Personal Data or Information. What is the amount of penalty?

A. Rs. 50,000,000

B. Upper limit not defined

C. Rs. 5,000,000

D. Rs. 500,000,000

正確答案: A

說明：（僅 Fast2test 成員可見）

問題6

Which of the following could be considered as triggers for updating privacy policy?

A. Regulatory changes

B. Change in service provider for an established business process

C. Recruitment of more employees

D. Privacy breach

正確答案: A

問題7

Which of the following statement about Personally Identifiable Information (PII) is true?

A. PII is a subset of Sensitive Personal Information

B. PII is any information about a legal entity including details of its registration or any information that may allow its easy identification

C. None of the above

D. PII is necessarily a single data element, not a combination of data elements, which can uniquely identify an individual

正確答案: B

問題8

The Indian cancer-treatment hospital Mumbai Hospital has organized a free health checkup for women in a specific district after securing adequate permission from the appropriate authority. During the camp the hospital staffs will be feeding. A computer connected to the hospital network system stores the medical records of these women. Are the participants at this camp required to be informed of the hospital's privacy policy and asked to consent to its collection and processing of personal information?

A. The law does not require the same in this case

B. Yes, in any language the hospital desires

C. They won't, since it's a free health camp for them

D. Certainly, in a language that they would understand

正確答案: D

最新的DSCI certified Privacy Professional (DCPP) - DCPP-01免費考試真題

聯系我們

站內鏈接

最新更新