Online Access Free DCPP-01 Practice Test

What does PHI stand for, as per HIPAA/ HITECH?

• A.Protected health information
• B.Personal health information
• C.Public health information
• D.Personal heuristic information

From the following list, identify the technology aspects that are specially designed for upholding the privacy:
i. Data minimization
ii. Intrusion prevention system
iii. Data scrambling
iv. Data loss prevention
v. Data portability
vi. Data obfuscation
vii. Data encryption
viii. Data mirroring
Please select the correct set of aspects from below options:

• A.Only i., ii., vi. and vii
• B.Only ii., v., vi., vii. and viii
• C.Only i., ii., iii., vii. and viii
• D.Only i., iii., vii. and viii

Among the following options, which would be the most appropriate for the transfer of Personal and Sensitive data from an EU company to another organization outside the EU?

• A.This case is not covered by the EU directive.
• B.Putting in place suitable model contractual clauses is the vendor's responsibility in the third country.
• C.A data exporter needs to create model contractual clauses after obtaining approvals from the data protection commissioner.
• D.The person transferring data to the destination country must inform the data protection commissioner, while the person exporting the data must notify the European Commission.

A US IT company has created a cloud based application for Canadian consumers only, with servers located in Vancouver, Canad a. The application allows its users to publish their short stories, essays or e-books. The purpose of the application, i.e. literary work, is clearly stated in the terms and conditions which are mandatorily acknowledged by each user. With respect to this application, the company must ensure compliance with:

• A.None of the above
• B.PIPEDA
• C.EU Data Protection Directive
• D.US Consumer Privacy Bill of Rights

A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have raised concerns about use of their personal information. Due to the concerns, the company has decided to create a privacy policy. What all should the company include in its privacy policy to address the raised concerns?

• A.Contact details of Law Enforcement Agencies (LEA) to whom information is disclosed
• B.Information about how personal information is processed and used, specifically
• C.The principle of presumed consent for data disclosure to avail benefits
• D.The purpose of collection of personal data