DSCI DCPP-01 問題集

質問 1：
After the rules were notified under section 43A of the IT (Amendment) Act, 2008, a clarification was issued by the government which exempted the service providers, which get access to/processes Sensitive Personal Data or information (SPDI) under contractual agreement with a legal entity located within or outside Indi a. Which privacy principle provisions notified under Sec 43A were exempted for the service providers?
A. Access and Correction
B. Privacy policy (which is published)
C. Consent
D. Disclosure of information
正解：C

質問 2：
If XYZ & Co. collects, stores and processes personal information of living persons, electronically in a structured filing system, then XYZ could be a:
A. Either A or B
B. Data Processor
C. Data Subject
D. Data Controller
正解：D

質問 3：
For negligence in implementing and maintaining the reasonable security practices and procedures for protecting Sensitive Personal Data or Information (SPDI) as mentioned in Section 43A and associated rules under IT (Amendment) Act, 2008, a corporate entity may be liable to pay compensation of up to___________
A. Upper limit not defined
B. Rs. 50,000,000
C. Rs. 5,000,000
D. Rs. 500,000,000
正解：A

質問 4：
According to the privacy statement of an organization, which of the following words is true?
A. The Information Technology (Amendment) Act, 2008 does not require the publication of privacy policies on websites in India
B. In order to follow privacy laws, it is mandatory that there is a phone contact information for the organization's owner in the online privacy statement so that customers can reach out in case of a concern or incident, which can be managed online
C. A privacy statement demonstrates to stakeholders how an organization gathers, uses, discloses, and manages personal information
D. The content of an organization's online privacy statement will be influenced by the applicable laws, and may need to address requirements across geographic boundaries and legal jurisdictions
正解：D

質問 5：
Choose from the options below to group privacy principles into user centric (requiring people's involvement) and organization centric (restricted to processes within the organization) categories:
A. User Centric: Choice, Collection Limitation, Access and Correction Organization Centric: Notice, Use Limitation, Security, Disclosure to third party, Accountability
B. User Centric: Notice, Consent, Collection Limitation, Access and Correction Organization Centric: Choice, Use Limitation, Security, Disclosure to third party, Openness, Accountability
C. User Centric: Notice, Consent, Choice, Access & Correction Organization Centric: Consent, Collection Limitation, Use Limitation, Security, Disclosure to third party, Openness, Accountability
D. User Centric: Notice, Openness, Accountability Organization Centric: Consent, Choice, Collection Limitation, Use Limitation, Security, Disclosure to third party, Access & Correction
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following is not a driver for increased privacy-related concerns and subsequent regulatory responses from various governments around the world?
A. Increasing economic value of personal information
B. Outsourcing and trans-border data flows in globalized world
C. Phenomenal rise in use of social networking sites, where a lot of personal information is shared with others
D. Rising demand of data privacy professionals
正解：C

質問 7：
With respect to privacy monitoring and incident management process, which of the below should be a part of a standard incident handling process?
1. Incident identification and notification
2. Investigation and remediation
3. Root cause analysis
4. User awareness training on how to report incidents
Please select the correct option:
A. 1, 2 and3
B. I and 2
C. 3 and 4
D. All of the above
正解：A

質問 8：
In India, who among the following would be the authorized legal entities to monitor and intercept communication of individuals?
A. "Intermediaries" as defined under the IT (Amendment) Act, 2008
B. Directorate of Revenue Intelligence (DRI)
C. Telecom Service Providers
D. Intelligence and Law Enforcement Agencies
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Among the following, which of the following is classified as the most important reason for enacting data protection/privacy laws around the world?
A. Maintain social harmony
B. Take legal action against the organizations and fine them for failing to protect privacy
C. Protect the rights of individuals
D. Ensure constitutional protection
正解：B