Exin Data Protection Foundation and EXIN Privacy

Question - 18 Maximum mark : - 34

Home
All Exams
Exin Data Protection Foundation and EXIN Privacy Online Practice Exams
Exin Data Protection Foundation and EXIN Privacy

What is the essence of the principle 'Full Lifecycle Protection'?

Delivering the maximum degree of data protection by default, ensuring that personal data are automatically protected in any given IT system or business
practice. ✘ Ensuring that whatever business practice or technology is involved, processing is done according to the stated objectives, subject to independent verification. ✘ Embedding security measures to protect the data from the moment it is collected, throughout processing until it is destroyed at the end of the process. ✘ Prioritizing the protection of the interests of the individual by offering for example strong privacy defaults, appropriate notice or empowering user-friendly options. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

For processing of personal data to be legal, a number of requirements must be fulfilled. What is a requirement for lawful personal data processing?

A 'code of conduct', describing what the processing exactly entails, must be in place. ✘ The data subject must have given consent, prior to the processing to begin. ✘ The processing must be reported to and allowed by the Data Processing Authority ✘ There must be a legitimate ground for the processing of personal data. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Under what EU legislation is data transfer between the EEA and the U.S.A. allowed?

An adequacy decision based on the Privacy Shield program ✘ An adequacy decision by reason of US domestic legislation ✘ The Transatlantic Trade an Investment Partnership (TTIP) ✘ The U.S.A.'s commitment to join the European Economic Area ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

According to the GDPR, for which situations should a Data Protection impact Assessment (DPIA) be conducted?

For all projects that include technologies or processes that require data protection ✘ For all sets of similar processing operations with comparable risks ✘ For any situation where technologies and processes will be subject to a risk assessment ✘ For technologies and processes that are likely to result in a high risk to the rights of data subjects ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Important technical requirements set out in the General Data Protection Regulation (GDPR) are about data quality. One is the obligation to ensure appropriate security, including protection against unauthorized or unlawful processing. What is another important technical requirement?

To ascertain that personal data collection is adequate, relevant and limited to what is necessary in relation to the purposes ✘ To control that data collected for specified, explicit and legitimate purposes is not further processed for other purposes ✘ To keep personal data accurate and up to date, ensuring that inaccurate data are erased or rectified without delay ✘ To make sure that personal data is processed lawfully, fairly and in transparent manner in relation to the data subject ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

According to the GDPR, what is a mandatory topic in a DPIA report?

Systematic description of the fiduciary duties to ensure compliance to all relevant laws and regulations ✘ An assessment of the necessity and proportionality of the processing operations in relation to the purposes ✘ The documentation of the risks to the rights and freedoms of the data protection officer ✘ The measures envisaged to address the privacy compliance frameworks risks ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The GDPR states that records of processing activities must be kept by the controller. To whom must the controller make these records available, if requested?

The data processor ✘ The Data Protection Officer ✘ The European Commission ✘ The supervisory authority ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which situation is considered a data breach according to the GDPR?

A processor deletes personal data after his contract with the controller expired. ✘ A processor leaves his computer unattended, where colleagues may be able to access it. ✘ After a disk crash a processor restores personal data from a recent back-up. ✘ After processing a processor deletes personal data on instruction of the controller. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

According to the GDPR, what is the main reason to consider data protection in the initial design phase?

It ensures efficiency in project phases ✘ It ensures privacy by default ✘ It reduces the risk of fraud ✘ It reduces the risk of liability ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

A personal data breach has occurred and the controller is writing a draft notification for the Supervisory Authority. The document describes the nature of the breach and its possible consequences. It also contains information on the parties that can provide additional information on the data breach to the Supervisory Authority. What other information should the controller add?

Information of local and national authorities that have been informed about the data breach. ✘ Name and contact details of the data subjects whose data may be breached. ✘ Suggested measures to mitigate the adverse consequences of the data breach. ✘ The information needed to access the personal data that has been breached. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Exin Data Protection Foundation and EXIN Privacy

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner