最新的Exin Privacy & Data Protection認證 PDPF考試題庫

問題1

A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal dat a. Which role in data protection is defined here?

A. Third party

B. Controller

C. Supervisory authority

D. Processor

正確答案: B

說明：（僅 VCESoft 成員可見）

問題2

How should data protection between the processor and controller be regulated in accordance with the General Data Protection Regulation (GDPR)?

A. Contract

B. Compulsory Corporate Rules.

C. Supervisory Authority endorsement.

D. Standard contractual clauses.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

A company CEO travels to a meeting in another city. He takes a notebook with information about the company's new projects and acquisitions, which will be the subject of discussion at this meeting. These are the only data stored on the notebook.
The notebook accidentally falls into the hotel's pool and all data is lost.
What happened, considering the General Data Protection Regulation (GDPR)?

A. A security incident

B. A security risk

C. A vulnerability

D. A data breach

正確答案: A

說明：（僅 VCESoft 成員可見）

問題4

Which of the alternatives describes one of the Supervisory Authority's responsibilities?

A. Consider the nature of the treatment, and as far as possible, assist the controller in order to enable the controller to fulfill his obligation.

B. Provide the controller with all necessary information to demonstrate compliance with obligations.

C. Apply technical and organizational measures to ensure that only personal data that are necessary for each specific purpose of processing are processed.

D. Supervise the processing of data of holders residing in a country belonging to the European Economic Area (EEA).

正確答案: D

說明：（僅 VCESoft 成員可見）

問題5

How does a Supervisory Authority collaborate to the application of GDPR?

A. Perform a Data Privacy Impact Analysis (DPI) at the request of the Data Protection Officer - DPO.

B. Assists in the implementation of a data protection management system (at controller request).

C. Determines technical safety measures to be applied to the controller.

D. Monitor and enforce the application of this Regulation.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題6

A person is moving from city A to city B, within an EEA member state. In city A he was a patient of the local hospital A.
In city B, he becomes a patient of hospital B.
The patient has opted out of the national electronic patients file system. The patient asks hospital A to forward his medical file directly to hospital B.
According to the GDPR, what is allowed?

A. The hospital in A can send the data directly to hospital B, as requested by the patient.

B. The hospital in A can send the medical file to the data subject, but not to another hospital

C. The hospital in A cannot send the file, because there is no legitimate ground for processing

D. The hospital in A can send the file to hospital B, before the patient has requested it

正確答案: A

說明：（僅 VCESoft 成員可見）

問題7

The Traffic Department of a city wants to know how many cars travel daily in order to plan the number of spaces needed to implement a rotating parking system.
To do this, cameras were installed at strategic points. Through image recognition software it is possible to capture the license plate and know how many cars traveled in the city. A monthly report is issued with the average number of cars present each day.
Signs and posters were spread around the city informing drivers and citizens what is the purpose of processing and that the data will be stored for up to five years, for future comparison.
What basic principle of legitimate processing of personal data is being violated in this case?

A. Personal data must be processed transparently in relation to the data subject.

B. Personal data must be collected for specific, explicit and legitimate purposes and must not be further processed for incompatible purposes.

C. Personal data must be kept in a way that allows the identification of data subjects for a period not longer than necessary.

D. Personal data must be processed in a way that guarantees the appropriate security of personal data.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題8

Your credit card has been cloned. A card contains various personal information.
What category of data breach is this incident?

A. Digital

B. Verbal

C. Material

正確答案: A

說明：（僅 VCESoft 成員可見）

問題9

Which of the following has a data breach under the General Data Protection Regulation (GDPR)?

A. A processor, after terminating its contract with the controller, deletes personal data.

B. A backup is restored by the controller to a corrupted personal data server.

C. A collaborator goes away without locking his workstation.

D. A notebook with financial reports from a multinational is stolen.

正確答案: C

問題10

Someone regularly receives offers from a store where he purchased something five years ago. He wants the company to stop sending offers and to wipe his personal data.
Which aspect of the rights of a data subject in the General Data Protection Regulation (GDPR) requires the company to comply?

A. The right to erasure

B. The right to withdraw consent

C. The right to rectification

D. The right to restriction of processing

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的EXIN Privacy and Data Protection Foundation - PDPF免費考試真題

最新更新

站內鏈接

聯系我們