最新なIAPP CIPP-CN問題集（202題）、真実試験の問題を全部にカバー！

質問 1：
Which principle ensures that personal data remains accurate, complete, and up-to-date throughout its lifecycle?
Response:
A. Purpose Limitation
B. Minimal Processing
C. Automated Decision-making
D. Accuracy and Integrity
正解：D

質問 2：
Which law primarily regulates the financial data processing activities of banks in China?
Response:
A. Data Security Law (DSL)
B. Banking Law of the People's Republic of China
C. Cybersecurity Law (CSL)
D. Consumer Protection Law
正解：B

質問 3：
A fintech company collects and processes large volumes of customer data in China. Which supervisory authorities would primarily monitor the company's data processing practices for compliance?
Response:
A. Ministry of Public Security (MPS) and National Health Commission (NHC)
B. Ministry of Industry and Information Technology (MIIT) and State Administration for Market Regulation (SAMR)
C. People's Bank of China (PBOC) and National Financial Regulatory Administration (NFRA)
D. Cyberspace Administration of China (CAC) and Ministry of Public Security (MPS)
正解：C

質問 4：
What is a key accountability requirement for personal information processors under PIPL?
Response:
A. Registering with all international privacy organizations
B. Establishing an internal data protection policy and conducting compliance audits
C. Outsourcing all data processing activities
D. Storing personal information indefinitely
正解：B

質問 5：
How must personal information processors handle data subjects' requests to withdraw consent under PIPL?
Response:
A. Comply with the withdrawal request but retain data for marketing purposes
B. Ignore requests if the processing agreement has been signed
C. Immediately stop processing data related to the withdrawn consent
D. Delay processing the withdrawal until a legal review is conducted
正解：C

質問 6：
An online payment provider in China suffers a cyberattack, exposing customers' payment details. What action must the provider take according to financial data protection laws?
Response:
A. Conduct a private internal investigation without public notification
B. Transfer responsibility to its cybersecurity partner
C. Notify affected customers and regulatory authorities immediately
D. Encrypt the exposed data after the breach
正解：C

質問 7：
Which of the following actions must employers take when collecting biometric data such as fingerprints for workplace security?
Response:
A. Collect biometric data automatically upon hiring
B. Notify employees and obtain their consent
C. Share biometric data with partner companies for cross-verification
D. Use biometric data only for marketing purposes
正解：B

質問 8：
A healthcare provider needs to share sensitive patient information with a research institution for a study on a rare disease. Which of the following steps must be taken to ensure compliance with PIPL?
Response:
A. Anonymize the data and obtain patient consent where applicable
B. Transfer patient data without consent if the research benefits the public
C. Use the data only for commercial gain
D. Transfer the data to a foreign research partner immediately
正解：A

質問 9：
Which of the following conditions must be met for data processors transferring data across borders for business purposes?
Response:
A. Publicizing the transfer process on the company's website
B. Storing personal data outside China permanently
C. Conducting a security assessment and signing a data processing agreement
D. Automatic data transfer approvals from all foreign regulators
正解：C