Online Access Free EXIN.PDPF.v2021-09-15.q87 Practice Test (Page 7)

PDPF Exam Question 26

Subcontracting treatment is regulated by contract or other regulatory act under Union or Member State law, which links the processor to the controller.
What this contract or other regulatory act stipulates?

A.A process for testing, assessing and regularly evaluating the effectiveness of technical and organizational measures to ensure safe treatment.

B.The processor assists the driver through technical and organizational measures to enable it to fulfill its obligation to respond to requests from data subjects.

C.The description of categories of data subjects and categories of personal data

D.The purpose of data processing

Correct Answer: B

Article 28 of the GDPR in its paragraph 3 mentions:
This contract or other normative act stipulates, inter alia, that the subcontractor:
a) processes the personal data only on documented instructions from the controller, including with regard to transfers of personal data to a third country or an international organisation, unless required to do so by Union or Member State law to which the processor is subject; in such a case, the processor shall inform the controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest; b) ensures that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; c) takes all measures required pursuant to Article 32; d) respects the conditions referred to in paragraphs 2 and 4 for engaging another processor; e) taking into account the nature of the processing, assists the controller by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the controller's obligation to respond to requests for exercising the data subject's rights laid down in Chapter III; f) assists the controller in ensuring compliance with the obligations pursuant to Articles 32 to 36 taking into account the nature of processing and the information available to the processor; g) at the choice of the controller, deletes or returns all the personal data to the controller after the end of the provision of services relating to processing, and deletes existing copies unless Union or Member State law requires storage of the personal data; h) makes available to the controller all information necessary to demonstrate compliance with the obligations laid down in this Article and allow for and contribute to audits, including inspections, conducted by the controller or another auditor mandated by the controller.

PDPF Exam Question 27

What is the essence of the principle Full Lifecycle Protection?

A.Prioritizing the protection of the interests of the individual by offering for example strong privacy defaults, appropriate notice or user-friendly options.

B.Delivering the maximum degree of data protection by default, ensuring that personal data are automatically protected in any given IT system or business practice.

C.Embedding security measures to protect the data horn the moment it is collected throughout processing until M is destroyed at the end of the process

D.Ensuring that whatever business practice or technology is involved, processing is done according to the stated objectives, subject to independent verification

PDPF Exam Question 28

A gentleman has a loan denied by the bank's system that he has been a customer for many years. He is disgusted, because the loan would make it possible to hold the wedding of his only granddaughter.
He contacts the bank and asks for explanations. He wants to know exactly why his loan was denied and based on what information.
What right is required by the data subject according to the GDPR?

A.Right to limitation of treatment

B.Right to rectification

C.Data subject's right of access

D.Right to object and automated individual decision-making

PDPF Exam Question 29

In what way are online activities of people most effectively used by modern marketers?

A.By tagging users of social media, profiles of their online behavior can be created these profiles are used to ask them to promote a product.

B.By tagging visitors of web pages, profiles of their online behavior can be created. These profiles are sold and used in targeted advertisement campaigns.

C.By analyzing the logs of the web server it can be seen which products are lop sellers, allowing them to optimize their marketing campaigns for those products.

PDPF Exam Question 30

Under what EU legislation is data transfer between the EEA and the U.S.A. allowed?

A.An adequacy decision based on the Privacy Shield program

B.An adequacy decision by reason of US domestic legislation

C.The Transatlantic Trade an Investment Partnership (TTIP)

D.The U.S.A.'s commitment to join the European Economic Area

Latest Upload: 149CBIC.CIC.v2025-09-13.q75; 151Cisco.700-841.v2025-09-13.q131; 145SAP.C_ABAPD_2507.v2025-09-12.q56; 128SAP.C_TS452_2022.v2025-09-12.q83; 211ACSM.020-222.v2025-09-11.q48; 166VMware.5V0-31.23.v2025-09-10.q73; 138Oracle.1z0-915-1.v2025-09-10.q24; 173Citrix.1Y0-231.v2025-09-10.q87; 148SAP.C-THR85-2505.v2025-09-09.q29; 188Adobe.AD0-E727.v2025-09-09.q76

PDPF Exam Question 26

PDPF Exam Question 27

PDPF Exam Question 28

PDPF Exam Question 29

PDPF Exam Question 30

Download PDF File