Free Access IAPP.CIPP-E.v2022-11-25.q113 Practice Test (Page 3)

Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?

A.A company wants to combine location data with other data in order to offer more personalized service for the customer.

B.A company wants to use location data to infer information on a person's clothes purchasing habits.

C.A company wants to build a dating app that creates candidate profiles based on location data and data from third-party sources.

D.A company wants to use location data to track delivery trucks in order to make the routes more efficient.

For which of the following operations would an employer most likely be justified in requesting the data subject's consent?

A.Assessing a potential employee's job application.

B.Processing an employee's health certificate in order to provide sick leave.

C.Operating a CCTV system on company premises.

D.Posting an employee's bicycle race photo on the company's social media.

Which of the following describes a mandatory requirement for a group of undertakings that wants to appoint a single data protection officer?

A.The group of undertakings must obtain approval from a supervisory authority.

B.The group of undertakings must be comprised of organizations of similar sizes and functions.

C.The data protection officer must be located in the country where the data controller has its main establishment.

D.The data protection officer must be easily accessible from each establishment where the undertakings are located.

Under what circumstances might the "soft opt-in" rule apply in relation to direct marketing?

A.Where an individual's details have been obtained from a bought-in marketing list.

B.When an individual has not consented to the marketing.

C.When an individual's details are obtained from their inquiries about buying a product.

D.Where an individual is given the ability to unsubscribe from marketing emails sent to him.

What must a data controller do in order to make personal data pseudonymous?

A.Encrypt the data in order to prevent any unauthorized access or modification.

B.Use the data only in aggregated form for research purposes.

C.Separately hold any information that would allow linking the data to the data subject.

D.Remove all indirect data identifiers and dispose of them securely.

Other Version: 981IAPP.CIPP-E.v2025-08-02.q177; 1379IAPP.CIPP-E.v2023-08-14.q153; 2364IAPP.CIPP-E.v2022-07-03.q102; 2038IAPP.CIPP-E.v2022-05-14.q101; 57IAPP.Trainingdump.CIPP-E.v2021-11-07.by.june.59q.pdf

Latest Upload: 103Huawei.H35-210_V2.5.v2025-09-18.q127; 103NBMTM.BCMTMS.v2025-09-18.q34; 103Microsoft.PL-500.v2025-09-18.q152; 110GAQM.CDCS-001.v2025-09-17.q15; 116Huawei.H19-301_V4.0.v2025-09-17.q37; 106VMware.5V0-33.23.v2025-09-17.q24; 115Oracle.1Z0-1078-23.v2025-09-17.q30; 154IAPP.CIPP-US.v2025-09-17.q217; 158Salesforce.ADM-201.v2025-09-16.q192; 140SAP.C-HRHPC-2505.v2025-09-15.q26

Download PDF File