PDPF Exam - Free Sample Questions & Answers

Preparing for the PDPF exam is simple with Certs Blitz. We offer easy-to-understand study materials that help you learn the most important exam topics. You can study using our PDF questions, practice online with a real exam-style test, or use the desktop practice software. Choose the study method that works best for you and prepare at your own pace.

At Certs Blitz, we keep our PDPF practice questions up to date. Whenever the exam syllabus or objectives change, we update our study materials so you always learn the latest topics. This helps you save time, avoid outdated content, and feel more confident when you take your exam.

Question #1 (Topic: Demo Questions)

Under what EU legislation is data transfer between the EEA and the U.S. A. allowed?

An adequacy decision based on the Privacy Shield program

An adequacy decision by reason of US domestic legislation

The Transatlantic Trade an Investment Partnership (TTIP)

The U.S.A.’s commitment to join the European Economic Area

Correct Answer: A

Explanation:

Reference: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en

Question #2 (Topic: Demo Questions)

For processing of personal data to be legal, a number of requirements must be fulfilled. What is a requirement for lawful personal data processing?

A ‘code of conduct’, describing what the processing exactly entails, must be in place.

The data subject must have given consent, prior to the processing to begin.

The processing must be reported to and allowed by the Data Processing Authority

There must be a legitimate ground for the processing of personal data.

Correct Answer: D

Question #3 (Topic: Demo Questions)

An architect, leaving a building site, puts his laptop for a moment beside his car on the road, while answering his phone. When driving away he sees in the mirror his laptop being crushed by an enormous lorry driving over it. All his files on the design of the building and the calculations he worked on are lost. His only consolation is that those were the only files on the device.

In terms of the GDPR, what happened?

a data breach

a security incident

a security issue

a vulnerability

Correct Answer: B

Question #4 (Topic: Demo Questions)

Which of the following options describes the concept of data minimization?

It is the minimization of data storage locations.

It is the decrease in the space allocated for data storage.

It is the limitation of data to the purposes for which it is treated.

It is the use of data for the shortest possible time.

Correct Answer: C

Explanation:

n its Article 5, which deals with the Principles relating to the processing of personal data, paragraph 1, the GDPR describes:

1. Personal data shall be:

adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed

(data minimisation);

Article 5 mentions all GDPR principles for processing personal data.

The data minimization principle refers to the purpose of the law that only the data that is required for processing should be collected.

This is also favorable to businesses. The less data is collected, the less likely violations are to occur and consequently the impacts also decrease.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679

Question #5 (Topic: Demo Questions)

A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that. Unfortunately, the processor makes a mistake and uses personal data collected by another controller for a different purpose. The mistake is found before the report is created, and nobody has access to personal date he or she should not have had access to. How should the processor act on this situation and what should the controller do, if anything?

The processor must notify the controller and the controller must notify the Data Protection Authority of a data breach.

The processor must notify the controller of a data breach. The controller must assess the possible risk to the data subjects.

The processor must notify the Data Protection Authority of a data breach. The controller must execute a PIA to assess the risk to data subjects.

The processor must restart processing using the right data. There is no need for the controller to act.

Correct Answer: B

Page: 1 / 1