CIPP-E Deutsch 시험은 출제 범위가 넓고 문제 난이도가 높아 체계적인 대비가 필요합니다. ExamPassdump이 제공하는 IAPP Certified Information Privacy Professional/Europe (CIPP/E) (CIPP-E Deutsch Version) 모의고사 310문항은 실제 시험과 유사한 수준으로 제작되었습니다.

IAPP CIPP-E Deutsch 시험 개요:

IAPP CIPP-E Deutsch 시험 요강 주제:

IAPP CIPP-E Deutsch 시험에 대한 질문과 답변 모음

최신 Certified Information Privacy Professional CIPP-E-Deutsch 무료샘플문제

문제 #1

Mit welchem ​​der folgenden Rechte ist das Transparenzprinzip am unmittelbarsten verbunden?

A. Widerspruchsrecht
B. Recht auf Vergessenwerden.
C. Recht auf Information.
D. Recht auf Einschränkung der Verarbeitung.

문제 #2

SCENARIO
Please use the following to answer the next question:
You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the manufacturer has no offices outside Hong Kong and in fact does not employ any staff outside Hong Kong, it has entered into a number of local distribution contracts. The toys produced by the company can be found in all popular toy stores throughout Europe, the United States and Asi a. A large portion of the company's revenue is due to international sales.
The company now wishes to launch a new range of connected toys, ones that can talk and interact with children. The CEO of the company is touting these toys as the next big thing, due to the increased possibilities offered: The figures can answer children's Questions: on various subjects, such as mathematical calculations or the weather. Each figure is equipped with a microphone and speaker and can connect to any smartphone or tablet via Bluetooth. Any mobile device within a 10-meter radius can connect to the toys via Bluetooth as well. The figures can also be associated with other figures (from the same manufacturer) and interact with each other for an enhanced play experience.
When a child asks the toy a QUESTION, the request is sent to the cloud for analysis, and the answer is generated on cloud servers and sent back to the figure. The answer is given through the figure's integrated speakers, making it appear as though that the toy is actually responding to the child's QUESTION. The packaging of the toy does not provide technical details on how this works, nor does it mention that this feature requires an internet connection. The necessary data processing for this has been outsourced to a data center located in South Africa. However, your company has not yet revised its consumer-facing privacy policy to indicate this.
In parallel, the company is planning to introduce a new range of game systems through which consumers can play the characters they acquire in the course of playing the game. The system will come bundled with a portal that includes a Near-Field Communications (NFC) reader. This device will read an RFID tag in the action figure, making the figure come to life onscreen. Each character has its own stock features and abilities, but it is also possible to earn additional ones by accomplishing game goals. The only information stored in the tag relates to the figures' abilities. It is easy to switch characters during the game, and it is possible to bring the figure to locations outside of the home and have the character's abilities remain intact.
To ensure GDPR compliance, what should be the company's position on the issue of consent?

A. Consent for data collection is implied through the parent's purchase of the action figure for the child.
B. Written authorization attesting to the responsible use of children's data would need to be obtained from the supervisory authority.
C. Parental consent for a child's use of the action figures would have to be obtained before any data could be collected.
D. The child, as the user of the action figure, can provide consent himself, as long as no information is shared for marketing purposes.

문제 #3

Ein Unternehmen befindet sich in einem Land, das von der Europäischen Union (EU) NICHT als angemessen angesehen wird. Welche der folgenden Verpflichtungen hat das Unternehmen, wenn es personenbezogene Daten von einer anderen Organisation im Europäischen Wirtschaftsraum (EWR) gemäß Standardvertragsklauseln importiert?

A. Stellen Sie sicher, dass die betroffenen Personen benachrichtigt und ihre Zustimmung eingeholt werden.
B. Stellen Sie sicher, dass die örtlichen Gesetze das Unternehmen nicht daran hindern, seinen vertraglichen Verpflichtungen nachzukommen.
C. Geben Sie alle von einer Datenschutzbehörde (DPA) angeforderten Informationen innerhalb von 30 Tagen an.
D. Senden Sie den Vertrag an die eigene Regierungsbehörde.

문제 #4

Das Start-up MagicAl entwickelt ein KI-System, das Teil eines medizinischen Geräts zur Erkennung von Hautkrebs sein soll. Um einer möglichen Voreingenommenheit in seinem KI-System vorzubeugen, beschließt das IT-Team, Daten über die ethnische Herkunft, Nationalität und das Geschlecht der Benutzer zu sammeln.
Welches wäre gemäß Artikel 9 der DSGVO (Verarbeitung besonderer Kategorien personenbezogener Daten) die am besten geeignete Rechtsgrundlage für diese Verarbeitung?

A. Verarbeitung ist für wissenschaftliche oder statistische Zwecke erforderlich.
B. Verarbeitung, die für die Abwehr von Rechtsansprüchen in möglichen Fahrlässigkeitsfällen erforderlich ist.
C. Verarbeitung aus Gründen eines erheblichen öffentlichen Interesses erforderlich.
D. Verarbeitung, die für Zwecke der Gesundheitsvorsorge oder der Arbeitsmedizin erforderlich ist.

문제 #5

Unter welchen der folgenden Bedingungen gilt die Allgemeine Datenschutzverordnung NICHT für die Verarbeitung personenbezogener Daten?

A. Wenn die personenbezogenen Daten nur in nicht elektronischer Form verarbeitet werden
B. Wenn die personenbezogenen Daten erfasst und dann vom Controller pseudonymisiert werden
C. Wenn die personenbezogenen Daten von einer Person nur für ihre Haushaltsaktivitäten verarbeitet werden
D. Wenn die personenbezogenen Daten vom für die Verarbeitung Verantwortlichen gespeichert, aber nicht für weitere Zwecke verarbeitet werden

질문과 대답: