Free Exin PDPF Exam Dumps and PDPF Exam Questions

Question No: 21

MultipleChoice

An architect, leaving a building suite, puts his laptop for a moment beside his car on the road, while his phone. When driving away he sees in the mirror his laptop being crushed by an enormous driving over it. All his files on the design of the building and the calculation ne worked on are lost. His only consolation is that those were the only files on the device.

In terms of the GDRP, what happened?

Options

Aa data breach

Ba security incident

Ca security issue

Da vulnerability

Question No: 22

MultipleChoice

Which action is considered processing of personal data where the GDRP applies?

Options

AAnalysis of hearth data regarding the cause death of victims of lethal accidents in the previous five years.

BMaking a backup of a register with names, addresses and bank accounts of subscribers to a newspaper.

CPerforming statistical analysis on medical data which has been anonymized so identification of the data subject is impossible.

DPublishing statistics based on anonymous interviews regarding the political views of people visit a shopping mall.

Question No: 23

MultipleChoice

Which case is a data breach according to the GDPR?

Options

Aillegally obtained corporate data from a human resources management system.

BPersonal data is processed without a binding contract.

CPersonal data is processed by anyone other than the controller, Processor or, possibly, subprocessor.

DThe operation of a vulnerable server in the network of the processor.

Question No: 24

MultipleChoice

''The controller shall implement appropriate technical and organizational measures for ensuring that ( ) only personal data which are necessary for each specific purpose of the processing are processed''

Which term in the General Data Protection regulation (GDPR) is defined?

Options

ACompliance.

BData protection by default

CData protection by design

Dembedded protection

Question No: 25

MultipleChoice

What does the principle of 'data minimization'' mean?

Options

APersonal data shall be accurate and where necessary kept up to data.

BPersonal data shall be adequate and limited to which is necessary for the purposes of the processing

CPersonal data shall be processed in a marmot that ensures appropriate security of the personal data

DPersonal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Question No: 26

MultipleChoice

According to art 33 of the General Data Protection Regulation (GDPR) the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it. Notify the personal data breach to the Supervisory Authority

What to the maximum partially for non-compliance with this obligation

Options

A 10 000.000 or 2% of the annual global tumor, whichever is higher

B 20.000.000 or 4% of the annual global turnover, whichever is higher

CUp to 500.000 with a minimum of 120.000

DUp to B20.000 with a minimum of 350.000

Question No: 27

MultipleChoice

What is the definition of privacy related to the General Data Protection Regulation (GDRP)?

Options

AA situation in which one is not observed or distributed by the government or uninvited people.

BThe right to respect for a person's private and family life, his home and his correspondence.

CThe fundamental right to respect a person's physical and mental integrity.

DThe right to be protected against unsolicited into a intrusion into a computer or network and the processing of personal data by third parties.

Question No: 28

MultipleChoice

What is the most important different between the 95/46.EC and the GDPR?

Options

A95/46/EC applies as law in all EEA member states while the GDRP is a guidance.

B95/46/EC applies to processing of data EEA residents or wide and the GDPR does not.

CThe GDPR applies as law in all EEA member states while 95/46/EC is a guidance.

DThe GDPR applies to persons and organizations which process personal data within states. The scope of 95/46/EC is more restricted in this aspect.

Question No: 29

MultipleChoice

Which of the following types of data transfer outside the European Economic Area (EEA) is allowed?

Options

ATransfers based on the laws of the country it concerns

BTransfers falling under World Trade Organization rules

CTransfers governed by binding corporate rules

DTransfers within a global corporation or NGO

Question No: 30

MultipleChoice

The General Data protection Regulation (GDPR) allows processing of personal data only for purposes explicitly permitted by law. A lax advisor wants to file income tax returns for a neighbor

Which of the legitimate grounds in the GDPR applies?

Options

AProcessing of lite personal data is permitted in this case with explicit consent of the data subject.

BProcessing of the personal data is permitted because this is necessary for compliance with a legal obligation to which the controller is subject.

CProcessing of personal data is permitted is the course of a purely personal or household activity.