Get 100% Success with Latest DSCI Certification DCPLA Exam Dumps Apr 18, 2023
The Best DCPLA Exam Study Material and Preparation Test Question Dumps
NEW QUESTION 35
Which of the following are the key factors that need to be considered for determining the applicability of the privacy principles? (Choose all that apply.)
- A. Organization's commitment to the external stakeholder with respect to privacy
- B. The role of the organization in determining the purpose of the data collection
- C. How and where the data is coming in the organization
- D. Requirements stipulated by the local authorities from where the organization operating
Answer: B,C
NEW QUESTION 36
"Data which cannot be attributed to a particular data subject without use of additional information." Which of the following best describes the above statement?
- A. Metadata
- B. Pseudonymized Data
- C. Anonymized Data
- D. None of the above
Answer: B
NEW QUESTION 37
As a privacy assessor, what would most likely be the first artefact you would ask for while assessing an organization which claims that it has implemented a privacy program?
- A. Records of privacy specific training imparted to the employees handling personal information
- B. Records of deployed privacy notices and statements
- C. Personal information management policy
- D. Privacy risk management framework
Answer: D
NEW QUESTION 38
Following aspects can serve as inputs to a privacy organization for ensuring privacy protection:
I) Privacy related incidents detected/reported
II) Contractual obligations
III) Organization's exposure to personal information
IV) Regulatory requirements
- A. I, II, III and IV
- B. I, II and III
- C. II and IV
- D. None of the above, as privacy and compliance protection mechanisms are evolved based only on organization's privacy policies and procedures
Answer: A
NEW QUESTION 39
Which of the following does the 'Privacy Strategy & Processes' layer in the DPF help accomplish? (Choose all that apply.)
- A. Information Usage and Access
- B. Visibility over Personal Information
- C. Privacy Policy and Processes
- D. Personal Information Security
- E. Regulatory Compliance Intelligence
Answer: A,B,C,D
NEW QUESTION 40
Which of the following are classified as Sensitive Personal Data or Information under Section 43A of ITAA, 2008? (Choose all that apply.)
- A. Caste and religious beliefs
- B. Password
- C. Sexual orientation
- D. Biometric information
- E. Financial information
- F. Medical records and history
Answer: C,D,E,F
NEW QUESTION 41
Which of the following could be considered as triggers for updating privacy policy? (Choose all that apply.)
- A. Change in service provider for an established business process
- B. Privacy breach
- C. Recruitment of more employees
- D. Regulatory changes
Answer: B,D
NEW QUESTION 42
What are the Nine Privacy Principles as described in DSCI Privacy Framework (DPF)?
I) Use Limitation
II) Accountability
III) Data Quality
IV) Notice
V) Preventing Harm
VI) Choice & Consent
VII) Access and Correction
VIII) Data Minimization
IX) Openness
X) Disclosure to Third Parties
XI) Right to be Forgotten
XII) Collection limitation
XIII) Security
- A. I, II, III, IV, V, VI, VII, VIII, XII
- B. I, II, III, IV, V, VI, VII, VIII, IX
- C. I, II, IV, V, VI, VII, IX, X, XII, XIII
- D. I, II, III, IV, VII, VIII, IX, X, XI
Answer: C
NEW QUESTION 43
'Map the legal and compliance requirements to each data element that an organization is dealing with in all of its business processes, enterprise and operational functions, and client relationships.' This an imperative of which DPF practice area?
- A. Privacy Organization and Relationship (POR)
- B. Privacy Policy and Processes (PPP)
- C. Visibility over Personal Information (VPI)
- D. Regulatory Compliance Intelligence (RCI)
Answer: B
NEW QUESTION 44
As a privacy lead assessor assessing the company for DSCI's privacy certification, you are assessing the adequacy of resources and skills in the organization, to address privacy related responsibilities.
Which DSCI Privacy Framework (DPF) practice area is relevant?
- A. Visibility over Personal Information (VPI)
- B. Privacy Awareness and Training (PAT)
- C. Privacy Organization and Relationship (POR)
- D. Information Usage and Access (IUA)
Answer: C
NEW QUESTION 45
A newly appointed Data Protection officer is reviewing the organization's existing privacy policy. Which of the following would be the most critical factor for the review process?
- A. Awareness of the business units about the privacy policy
- B. Privacy policies of industry peers
- C. Changes in the legal/regulatory regime
- D. Foreseeable challenges in the effective implementation of the policy
Answer: C
NEW QUESTION 46
Classify the following scenario as major or minor non-conformity.
"The organization has a very mature information security policy. Lately, the organization has realized the need to focus on protection of PI. A formal PI identification exercise was done for this purpose and a mapping of PI and security controls was done. The organization has also put in place data masking technology in certain functions where the SPI was accessed by employees of a third party. However, the organization is yet to include PI specifically in its risk assessment exercise, incident management, testing, data classification and security architecture programs."
- A. None of the above
- B. Minor
- C. Major
- D. Both Major & Minor
Answer: D
NEW QUESTION 47
Which of the following is not an objective of VPI?
- A. To enable identification of processes, functions and relationships handling personal information
- B. Assess the current state of data spread and transactions of the organization to map this against its privacy objectives
- C. None of the above
- D. Enable an organization to map its data operations and categorization of PI
Answer: C
NEW QUESTION 48
XYZ bank has recently decided to start offering online banking services. For doing so, the bank has outsourced its IT operations and processes to various third parties. Acknowledging privacy concerns, bank has decided to implement a privacy program. Assuming you have been tasked to deploy this framework for the bank, which of the following would most likely be your first step?
- A. Assign privacy roles and responsibilities for process owners
- B. Ensure that bank is equipped to test the relevance of each legal and compliance requirement in its environment
- C. None of the above
- D. Create an inventory of business processes that deal with personal information and identify the associated data element
Answer: D
NEW QUESTION 49
Which of the following measures can an organization implement to establish regulatory compliance intelligence? (Choose all that apply.)
- A. Ensure that a mechanism exists for quick and effective provisioning, de-provisioning and authorization of access to information or systems which are exposed to data
- B. Identify the liabilities imposed by the regulations with respect to specific data elements
- C. Ensure that knowledge with respect to legal and regulatory compliances is managed effectively
- D. Establish a process that keeps a track of applicable legal and regulatory changes
Answer: B,D
NEW QUESTION 50
An entity shall retain personal data only as long as may be reasonably necessary to satisfy the purpose for which it is processed; or with respect to an established retention period. This privacy principle is known as?
- A. Storage Limitation
- B. Security safeguards
- C. Use Limitation
- D. Collection Limitation
Answer: A
NEW QUESTION 51
__________ layer of the DSCI Privacy Framework (DPF) ensures that adequate level of awareness exists in an organization.
- A. Privacy Strategy and Processes
- B. None of the above
- C. Personal Information Security
- D. Information Usage, Access, Monitoring and Training
Answer: D
NEW QUESTION 52
Which of the following is outside the scope of an organization's privacy incident management plan?
- A. Defers data access rules for business users
- B. Remediation of incidents
- C. Communication of privacy incidents
- D. Detection of leakage of personal information
Answer: A
NEW QUESTION 53
Entities should collect personal information from user that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. This Privacy Principle is called:
- A. Storage Limitation
- B. Collection Limitation
- C. Use Limitation
- D. Accountability
Answer: B
NEW QUESTION 54
......
Get Ready to Pass the DCPLA exam Right Now Using Our DSCI Certification Exam Package: https://pass4sure.testvalid.com/DCPLA-valid-exam-test.html