A company is located in a country not considered by the European Union

1.A company is located in a country not considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company If it imports personal data from another organisation in the Europe an Economic Area (EEA) under standard contractual clauses? 选项： A:Submit the contract to its own government authority. B:Ensure that notice is given to and consent Is obtained from data subjects. C:Supply any information requested by a data protection authority {DPA) within 3 days. D:Ensure that local laws do not impede the company from meeting its contractual obligations.

2.company is located in a country not considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from another organisation in the European Economic Area (EEA) under standard contractual clauses? 选项： A:Submit the contract to Its own government authority . B:Ensure that notice is given to and consent is obtained from data subjects. C:Supply any information requested by a data protection authority (DPA) within 30 days D:Ensure that local laws do not impede the company from meeting its contractual obligations.

3.company is located in a country not considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from another organisation in the European Economic Area (EEA) under standard contractual clauses? 选项： A:Submit the contract to Its own government authority . B:Ensure that notice is given to and consent is obtained from data subjects. C:Supply any information requested by a data protection authority (DPA) within 30 days D:Ensure that local laws do not impede the company from meeting its contractual obligations.

4.186A company is located in a country NOT considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from anotherOrganization in the European Economic Area (EEA) under standard contractual clauses? 选项： A: Submit the contract to its own government authority. B: Ensure that notice is given to and consent is obtained from data subjects. C: Supply any information requested by a data protection authority (DPA) within 30 days. D: Ensure that local laws do not impede the company from meeting its contractual obligations.

5.101 A company is located in a country 1T considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from a1ther organization in the European Eco1mic Area (EEA) under standard contractual clauses? 选项： A:Submit the contract to its own government authority. B:Ensure that 1tice is given to and consent is obtained from data subjects. C:Supply any information requested by a data protection authority (DPA) within 30 days. D:Ensure that local laws do 1t impede the company from meeting its contractual obligations.

6.目198 A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, They are planning an assessment of the country's laws and practices, knowing that these may impinge upon the Transfer safeguards they intend to use All of the following factors would be relevant for the company to consider EXCEPT'? 选项： A:Any onward transfers, such as transfers of personal data to a sub-processor in the same or another third Country. B:The process of modernization in the third country concerned and their access to emerging technologies That rely on international transfers of personal data C:The technical, financial, and staff resources available to an authority m the third country concerned that May access the personal data to be transferred D:The contractual clauses between the data controller or processor established in the European Union/EEA And the recipient of the transfer established in the third country concerned

7.With respect to international transfers of personal data, the European Data Protection Board (EDPB) confirmed that derogation may be relied upon under what condition? 选项： A: If the data controller has received preapproval from a Data Protection Authority (DPA), after submitting the appropriate documents. B: When it has been determined that adequate protection can be performed. C: Only if the Data Protection Impact Assessment (DPIA) shows low risk. D: Only as a last resort and when interpreted restrictively.

8. External databases are electronic collections of consumer and market information obtained from data sources within a company's network.

9.Consent is given when an organization has 选项： A:Captured and stored data in its database B:“obtained permission from an individual for the collection, use or disclosure of person al information” C:Published specific information about its policies and practices D:Been hacked and information about people has become public E:Reviewed its current policies with its data governance committee

10.____ is the intentional collection, classification, and dissemination of information about a company, its products, and its processes. 选项：A、 Database managementB、 Knowledge managementC、 Data warehousingD、 Data mining

12.. Both historical records and frequently accessed data are stored on an on-premises storage system. The amount of current data is growing at an exponential rate. As the storage's capacity is nearing its limit, the company's Solutions Architect has decided to move the historical records to AWS to free up space for the active data. Which of the following architectures deliver the best solution in terms of cost and operational management? 选项： A:

Use AWS DataSync to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier Deep Archive to be the destination for the data.

B:

Use AWS Storage Gateway to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier Deep Archive to be the destination for the data.

C:

Use AWS DataSync to move the historical records from on-premises to AWS. Choose Amazon S3 Standard to be the destination for the data. Modify the S3 lifecycle configuration to move the data from the Standard tier to Amazon S3

Glacier Deep Archive after 30 days.

D:

Use AWS Storage Gateway to move the historical records from on-premises to AWS. Choose Amazon S3 Glacier to be the destination for the data. Modify the S3 lifecycle configuration to move the data from the Standard tier to Amazon S3 Glacier Deep Archive after 30 days.

13.Which of the following would not be considered as an internal user of accounting data for the GHI Company? （）选项： A:President of the company. B:Production manager. C:Merchandise inventory clerk. D:President of the employees’ labor union.

14.A portfolio manager identified a company within the portfolio that has not disclosed ESG data, as requested, in the last three years. The portfolio manager most likely concludes that … 选项： A:The company's management is managing its ESG risks or opportunities poorly. B:The company's management is managing its ESG risks or opportunities well without the need to C:Needs to talk with the company's management to understand the reasons for missing disclosing requested

15.869Which of the following is the MOST important privacy consideration for an organization that uses a cloud service provider to process customer data? 选项： A:Data privacy must be monitored in accordance with industry standards and best practices. B:All customer data transferred to the service provider must be reported to the regulatory authority. C:No personal information may be transferred to the service provider without the consent of the customer. D:Data privacy must be managed in accordance with the regulations applicable to the organization.