Labour Day Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: suredis

DSCI DCPLA DSCI Certified Privacy Lead Assessor Exam Practice Test

Page: 1 / 7
Total 70 questions

DSCI Certified Privacy Lead Assessor Questions and Answers

Testing Engine

  • Product Type: Testing Engine
$42  $119.99

PDF Study Guide

  • Product Type: PDF Study Guide
$36.75  $104.99
Question 1

Which of the following is not an objective of VPI?

Options:

A.

To enable identification of processes, functions and relationships handling personal information

B.

Assess the current state of data spread and transactions of the organization to map this against its privacy objectives

C.

Enable an organization to map its data operations and categorization of PI

D.

None of the above

Question 2

Section 43A of the Information Technology (Amendment) Act, 2008 holds____________ accountable for having reasonable security practices and procedures in place to protection sensitive personal data.

Options:

A.

Government

B.

Body corporates

C.

Government and body corporates alike

D.

None of the above

Question 3

What is the maximum compensation that can be imposed on an organization for negligence in implementing reasonable security practices as defined in Section 43A of ITAA, 2008?

Options:

A.

Uncapped compensation

B.

5 crores

C.

15 crores or 4% of the global turnover

D.

5 lakhs

Question 4

What is a Data Subject? (Choose all that apply.)

Options:

A.

An individual who provides his/her data/information for availing any service

B.

An individual who processes the data/information of individuals for providing necessary services

C.

An individual whose data/information is processed

D.

A company providing PI of its employees for processing

E.

An individual who collects data from illegitimate sources

Question 5

Certification once granted, will be valid for period of _______ years subject to surveillance assessments.

Options:

A.

4

B.

5

C.

3

D.

1

Question 6

Which of the following are key contributors that would enhance the complexity in implementing security measures for protection of personal information? (Choose all that apply.)

Options:

A.

Data collection through multiple modes and channels

B.

Evolution of nimble and flexible business processes affecting access management

C.

Regulatory requirements to issue privacy notice and data breach notification in specified format

D.

None of the above

Question 7

Following aspects can serve as inputs to a privacy organization for ensuring privacy protection:

I) Privacy related incidents detected/reported

II) Contractual obligations

III) Organization's exposure to personal information

IV) Regulatory requirements

Options:

A.

I, II and III

B.

II and IV

C.

I, II, III and IV

D.

None of the above, as privacy and compliance protection mechanisms are evolved based only on organization’s privacy policies and procedures

Question 8

Which of the following factors is least likely to be considered while implementing or augmenting data security solution for privacy protection?

Options:

A.

Security controls deployment at the database level

B.

Information security infrastructure up-gradation in the organization

C.

Classification of data type and its usage by various functions in the organization

D.

Training and awareness program for third party organizations

Question 9

What is a Data Controller?

Options:

A.

Entity that collects personal data

B.

Entity that stores personal data

C.

Entity that determines the purpose and means for data processing

D.

Entity that shares personal data with third parties

Question 10

The entire assessment process, from commencement to submission of final report to DSCI must be completed within 2 weeks.

Options:

A.

True

B.

False

Page: 1 / 7
Total 70 questions