Free DSCI DCPP-01 Exam Questions

Become DSCI Certified with updated DCPP-01 exam questions and correct answers

Page: 1 / 42

Total 208 Questions | Updated On: Jun 04, 2025

Add To Cart

Question 1

With respect to privacy governance, which of the following statements are correct?

A : Privacy governance defines the specifications for privacy operations performed on data processed through computer resource only

B : ivacy governance provides privacy strategy and direction, and takes decisions on key privacy issues

C : ivacy governance addresses day-to-day privacy incidents with processes established by privacy policies and procedures.

D : Privacy governance ensures that privacy issues are not left unaddressed in the organization.

Answer: B

Question 2

The Information Technology (Reasonable Security Practices And Procedures and Sensitive Data or

Information) Rules, 2011 incorporate which of the following privacy concepts and principles:

i. Collection Limitation

ii. Accountability

iii. Right to be forgotten

iv. Purpose Limitation

v. Access and correction

A : ii, iii and iv

B : I, ii, iv and v

C : I, iii, iv and v

D : l the above

Answer: B

Question 3

Which of the following is not a driver for increased privacy-related concerns and subsequent regulatory responses from various governments around the world?

A : tsourcing and trans-border data flows in globalized world

B : creasing economic value of personal information

C : ing demand of data privacy professionals

D : enomenal rise in use of social networking sites, where a lot of personal information is shared with others

Answer: D

Question 4

A growing economy has made it more important now than ever before for India to have comprehensive laws on __________.

A : ght to Information

B : pute resolution

C : ivacy

D : ght to Internet

Answer: C

Question 5

A multinational company with operations in several parts within EU and outside EU, involves international

data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in

size, the organization has a works council. Most of the data transferred is personal, and some of the data that

the organization collects is sensitive in nature, the processing of some of which is also outsourced to its

branches in Asian countries.

For the outsourced work of its customers’ data processing, in order to initiate data transfer to another

organizations outside EU, which is the most appropriate among the following?

A : vendor (data importer) in the third country, and not the exporter is responsible to put in place suitable model contractual clauses, and hence the exporter does not need to take any action

B : nce the data is processed by the vendor outside the EU, the EU directive does not apply and hence there are no legal concerns

C : data exporter needs to initiate model contractual clauses after obtaining approvals from data protection commissioner and have the vendor be a signatory on the same as data importer

D : data importer need to notify about the transfer to data protection commissioner in the destination country and exporter need to similarly notify in the EU country of origin

Answer: D

Page: 1 / 42

Total 208 Questions | Updated On: Jun 04, 2025

Add To Cart