FREE ETCP Security in Cloud Environments Questions and Answers

Question 1

Which of the following should you NOT do with data whilst at work?

Accepted Answer

A and D

Answer

Data protection regulations strictly govern how personal and sensitive data can be handled. Accessing 'personal data' not needed for work (A) is a breach of the 'need-to-know' principle, and recording 'personal data' for personal use outside of work (D) is a severe misuse and violation of privacy and data security policies. Both actions are explicitly prohibited to prevent unauthorized access, disclosure, and potential misuse of information.

Question 2

Which of the following does not constitute ‘sensitive data’? Data consisting of information about....

Accepted Answer

...an individual's home address

Answer

Under data protection laws like GDPR, 'sensitive data' refers to specific categories requiring extra protection, such as information about an individual's religious beliefs, political opinions, or criminal convictions. An individual's home address, while considered 'personal data' because it can identify a person, does not fall into these special categories of 'sensitive data'. Sensitive data typically carries a higher risk of discrimination or harm if misused.

Question 3

Who is the First Info Data Protection Officer?

Accepted Answer

Debbie Smith

Answer

This question asks for a specific factual recall related to the Ericsson Technical Certification Program (ETCP) and its internal data protection roles. Debbie Smith is the designated First Info Data Protection Officer for Ericsson. This information would be learned through company-specific training or documentation provided as part of the ETCP.

Question 4

What is 'personal data' considered to be under the DPA?

Accepted Answer

Name, address contact details and date of birth

Answer

Under the Data Protection Act (DPA) and similar regulations like GDPR, 'personal data' is defined as any information relating to an identified or identifiable natural person. This includes common identifiers such as a person's name, home address, contact details (like phone number or email), and date of birth, as these pieces of information can directly or indirectly identify an individual. Other options list categories that are either too general or fall under 'sensitive data'.

Question 5

What are we not allowed to do with 'sensitive data'?

Accepted Answer

All of the above

Answer

'Sensitive data' is subject to the highest level of protection under data privacy regulations. Organizations are strictly prohibited from collecting, storing, or disclosing sensitive data without explicit and informed consent from the individual, or a clear legal basis. Failing to obtain permission for collection or storage, or disclosing it without appropriate checks, constitutes a serious breach of data protection principles and can lead to significant penalties.

ETCP - Ericsson Technical Certification Program Practice Test

ETCP - Ericsson Technical Certification Program Practice Test

FREE ETCP Security in Cloud Environments Questions and Answers