PDPF by EXIN Actual Free Exam Questions And Answers

Question 1

According to the GDPR, what is a task of a supervisory authority?

A. Monitor and enforce the application of the GDPR

B. Implement technical and organizational measures to ensure compliance

C. Investigate security breaches of corporate information

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

What does the principle of 'data minimization' mean?

A. Personal data shall be processed in a manner that ensures appropriate security of the personal data.

B. Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

C. Personal data shall be adequate and limited to what is necessary for the purposes of the processing.

D. Personal data shall be accurate and where necessary kept up to date.

Discussion 0

Correct Answer: C Vote an answer

Question 3

A gentleman has a loan denied by the bank's system that he has been a customer for many years. He is disgusted, because the loan would make it possible to hold the wedding of his only granddaughter.
He contacts the bank and asks for explanations. He wants to know exactly why his loan was denied and based on what information.
What right is required by the data subject according to the GDPR?

A. Right to rectification

B. Right to object and automated individual decision-making

C. Right to limitation of treatment

D. Data subject's right of access

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

What is the legal status of the GDPR?

A. The GDPR sets out minimum conditions and requirements. Member states need to pass national laws to meet these minimum requirements.

B. The GDPR is functional law in all member states of the EEA. Some Articles allow for member states law to provide for more specific rules.

C. The GDPR is a recommendation of the European Commission that EEA countries' law authorities improve their laws on the protection of personal data.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

What is a description of data protection by design and by default?

A. Not holding more data than is strictly required for processing

B. Data may only be collected for explicit and legitimate purposes

C. An indication of timeframes if processing relates to erasure

D. An approach that implements data protection from the start (Correct)

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Organizations are obliged to keep a number of records to demonstrate compliance with the GDPR. Which record is not obligatory according to the GDPR?

A. A record of notifications sent to the supervisory authority regarding processing of personal data

B. A record of data breaches with all relevant characteristics, including notifications

C. A record of processors including personal data provided and the period this data can be retained

D. A record of all intended processing together with the processing purpose(s) and legal justifications

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which condition below allows personal data to be processed legally?

A. Data processing must be previously authorized by the Supervisory Authority.

B. A Data Privacy Impact Assessment (DPIA) should be performed prior to data collection.

C. There must be a legitimate basis for data processing.

D. Holders' rights must be protected by a privacy policy.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

A person buys a product at a store located in the European Economic Area (EEA). At the time of purchase, you are asked to fill out a registration form and he informs his personal email.
As is usual in many stores, in the next few days this person will start receiving several marketing emails. He considers the frequency of these emails to be very high. Demanding his rights, he asks the store to delete all his personal data.
What is the right required by the data subject?

A. Right to erasure

B. Right to rectification

C. Right to limitation of treatment

D. Data subject's right of access

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

A breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed. What is the exact term that is associated with this definition in the GDPR?

A. Security incident

B. Personal data breach

C. Confidentiality violation

D. Security breach

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

According to Article.33 of the GDPR the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority. What is the maximum penalty for non-compliance with this notification obligation?

A. € 10.000.000 or 2% of the annual global turnover, whichever is higher

B. Up to € 500.000 with a minimum of € 120.000

C. Up to € 820.000 with a minimum of € 350.000

D. € 20.000.000 or 4% of the annual global turnover, whichever is higher

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

EXIN Privacy and Data Protection Foundation - PDPF Exam Practice Test

Contact Us

Useful Links

Latest Updated