Try and practice the latest DSCI : DCPLA real questions & answers

DSCI DCPLA Exam Overview:

DSCI DCPLA Exam Syllabus Topics:

DSCI Certified Privacy Lead Assessor DCPLA certification Sample Questions:

1. How are privacy and data protection related to each other?

A) They are unrelated.
B) Data protection is a subset of privacy.
C) Privacy is a subset of data protection.
D) The terms 'privacy' and 'data protection' are interchangeable.

2. Which of the following are classified as Sensitive Personal Data or Information under Section 43A of ITAA,
2008? (Choose all that apply.)

A) Caste and religious beliefs
B) Sexual orientation
C) Password
D) Financial information
E) Medical records and history
F) Biometric information

3. Classify the following scenario as major or minor non-conformity.
"The organization defined information access and usage policy and rolled it out across the organization No formal exercise, however, was conducted to prepare the policy During implementation, certain discrepancies came out and these were addressed through appropriate policy revisions though this created a lot of hue and cry in the organization and the policy was criticized for adversely affecting productivity But with appropriate revisions and passage of time, the policy has been accepted In a recently conducted external audit one incident has come to light wherein the usage and access policy has been violated by an employee twice As per the auditor this incident should have been identified by the organization In its explanation to the auditor the management informed that appropriate access and usage monitoring mechanisms have been put in place but admitted that there may have been some lapses".

A) Both Major & Minor
B) Minor
C) None of the above
D) Major

4. From the following list, identify the technology aspects that are specially designed for upholding privacy:
I) Data minimization
II) Intrusion prevention system
III) Data scrambling
IV) Data loss prevention
V) Data portability
VI) Data obfuscation
VII) Data encryption
VIII) Data mirroring

A) Only I, III, IV, VI and VII
B) Only II, V, VI, VII and VIII
C) Only I, II, III, VII and VIII
D) Only I, III, V, VII and VIII

5. Classify the following scenario as major or minor non-conformity.
"The organization has a very mature information security policy. Lately, the organization has realized the need to focus on protection of PI. A formal PI identification exercise was done for this purpose and a mapping of PI and security controls was done. The organization has also put in place data masking technology in certain functions where the SPI was accessed by employees of a third party. However, the organization is yet to include PI specifically in its risk assessment exercise, incident management, testing, data classification and security architecture programs."

A) Both Major and Minor
B) Minor
C) None of the above
D) Major

Solutions: