Page 1 of 124
CIPP/E PRACTICE EXAM TEST BANK |
FREQUENTLY TESTED QUESTIONS WITH
CORRECT ANSWERS | BRAND NEW!
As a result of the European Court of Justice's ruling in the case
of Google v. Spain, search
engines outside the EEA are also likely to be subject to the
Regulation's right to be forgotten. This
holds true if the activities of an EU subsidiary and its U.S. parent
are what?
(A). Supervised by the same Data Protection Officer.
(B). Consistent with Privacy Shield requirements
(C). Bound by a standard contractual clause.
(D). Inextricably linked in their businesses. - ✔✔✔ Correct Answer > D).
Inextricably linked in their businesses.
What was the aim of the European Data Protection Directive
95/46/EC?
,Page 2 of 124
(A). To harmonize the implementation of the European
Convention of Human Rights across all
member states.
(B). To implement the OECD Guidelines on the Protection of
Privacy and trans-border flows of
Personal Data.
(C). To completely prevent the transfer of personal data out of the
European Union.
(D). To further reconcile the protection of the fundamental rights
of individuals with the free flow of
data from one member state to another. - ✔✔✔ Correct Answer > B). To
implement the OECD Guidelines on the Protection of Privacy and
trans-border flows of Personal Data
Which of the following would require designating a data
protection officer?
(A). Processing is carried out by an organization employing 250
persons or more.
(B). Processing is carried out for the purpose of providing for-
profit goods or services to individuals in
the EU.
(C). The core activities of the controller or processor consist of
processing operations of financial
,Page 3 of 124
information or information relating to children.
(D). The core activities of the controller or processor consist of
processing operations that require
systematic monitoring of data subjects on a large scale. - ✔✔✔
Correct Answer > D). The core activities of the controller or processor
consist of processing operations that require systematic
monitoring of data subjects on a large scale.
What type of data lies beyond the scope of the General Data
Protection Regulation?
(A). Pseudonymized
(B). Anonymized
(C). Encrypted
(D). Masked - ✔✔✔ Correct Answer > B). Anonymized
In addition to the European Commission, who can adopt standard
contractual clauses,
assuming that all required conditions are met?
(A). Approved data controllers.
(B). The Council of the European Union.
(C). National data protection authorities.
, Page 4 of 124
(D). The European Data Protection Supervisor. - ✔✔✔ Correct Answer >
A). Approved data controllers.
A worker in a European Union (EU) member state has ceased his
employment with a company. What should the employer most
likely do in regard to the worker's personal data?
A) Destroy sensitive information and store the rest per
applicable data protection rules
B) Store all the data
C) Securely store the data that is required by law
D) Provide the employee the reason for retaining the data - ✔✔✔
Correct Answer > A) Destroy sensitive information and store the rest
per applicable data protection rules
Which GDPR principle would a Spanish employer most likely
depend upon to annually send
the personal data of its employees to the national tax authority?
(A). The consent of the employees
(B). The legal obligation of the employer.
(C). The legitimate interest of the public administration.
CIPP/E PRACTICE EXAM TEST BANK |
FREQUENTLY TESTED QUESTIONS WITH
CORRECT ANSWERS | BRAND NEW!
As a result of the European Court of Justice's ruling in the case
of Google v. Spain, search
engines outside the EEA are also likely to be subject to the
Regulation's right to be forgotten. This
holds true if the activities of an EU subsidiary and its U.S. parent
are what?
(A). Supervised by the same Data Protection Officer.
(B). Consistent with Privacy Shield requirements
(C). Bound by a standard contractual clause.
(D). Inextricably linked in their businesses. - ✔✔✔ Correct Answer > D).
Inextricably linked in their businesses.
What was the aim of the European Data Protection Directive
95/46/EC?
,Page 2 of 124
(A). To harmonize the implementation of the European
Convention of Human Rights across all
member states.
(B). To implement the OECD Guidelines on the Protection of
Privacy and trans-border flows of
Personal Data.
(C). To completely prevent the transfer of personal data out of the
European Union.
(D). To further reconcile the protection of the fundamental rights
of individuals with the free flow of
data from one member state to another. - ✔✔✔ Correct Answer > B). To
implement the OECD Guidelines on the Protection of Privacy and
trans-border flows of Personal Data
Which of the following would require designating a data
protection officer?
(A). Processing is carried out by an organization employing 250
persons or more.
(B). Processing is carried out for the purpose of providing for-
profit goods or services to individuals in
the EU.
(C). The core activities of the controller or processor consist of
processing operations of financial
,Page 3 of 124
information or information relating to children.
(D). The core activities of the controller or processor consist of
processing operations that require
systematic monitoring of data subjects on a large scale. - ✔✔✔
Correct Answer > D). The core activities of the controller or processor
consist of processing operations that require systematic
monitoring of data subjects on a large scale.
What type of data lies beyond the scope of the General Data
Protection Regulation?
(A). Pseudonymized
(B). Anonymized
(C). Encrypted
(D). Masked - ✔✔✔ Correct Answer > B). Anonymized
In addition to the European Commission, who can adopt standard
contractual clauses,
assuming that all required conditions are met?
(A). Approved data controllers.
(B). The Council of the European Union.
(C). National data protection authorities.
, Page 4 of 124
(D). The European Data Protection Supervisor. - ✔✔✔ Correct Answer >
A). Approved data controllers.
A worker in a European Union (EU) member state has ceased his
employment with a company. What should the employer most
likely do in regard to the worker's personal data?
A) Destroy sensitive information and store the rest per
applicable data protection rules
B) Store all the data
C) Securely store the data that is required by law
D) Provide the employee the reason for retaining the data - ✔✔✔
Correct Answer > A) Destroy sensitive information and store the rest
per applicable data protection rules
Which GDPR principle would a Spanish employer most likely
depend upon to annually send
the personal data of its employees to the national tax authority?
(A). The consent of the employees
(B). The legal obligation of the employer.
(C). The legitimate interest of the public administration.
