從免費範例、即時下載到 365 天免費更新，KaoGuTi 把 PDP9 備考的每個環節一次備齊。你只管專心準備 BCS Practitioner Certificate in Data Protection，其餘瑣事交給我們，2026 年順利上場。

BCS PDP9 考試概覽:

認證廠商:	BCS (British Computer Society)
考試名稱:	BCS 資料保護專業人員證書 (PDP9)
考試代碼:	PDP9
支援語言:	English
考試形式:	選擇題
相關認證:	BCS 資料保護基礎證書
推薦課程:	BCS 資料保護培訓路徑
考試報名:	BCS 官方報名頁面
範例考題:
考試方式:	線上或測試中心（監考）
必備條件:	無強制先決條件；建議具備資料保護基礎知識。
官方大綱網址:	https://www.bcs.org

BCS PDP9 考試大綱主題:

BCS Practitioner Certificate in Data Protection 考試常見問題解答

最新的 BCS Practitioner PDP9 免費考試真題：

問題 #1

Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?

A. It is key to the accountability element of the GDPR.
B. It is necessary to fulfil the requirement that all DPIAs are submitted to the ICO
C. It fulfils a requirement that data protection is carried out by design and default.
D. It assists in identifying the main risks that may exist in any use of data, so that they can be mitigated

問題 #2

In which of the following circumstances would Privacy and Electronic Communications Regulation (PECR) NOT apply?

A. Telephone marketing communications
B. Text marketing communications.
C. Email marketing communications
D. Postal marketing communications.

問題 #3

Which of the following is NOT a role of the Information Commissioner's Office?

A. Encouraging the establishment of data protection certification mechanisms and of data protection seals
B. Providing an annual activity report to Parliament
C. Publishing a list of the kind of processing that is subject to the requirement for a DPIA
D. Providing case by case advice on what retention period companies should use

問題 #4

Describe the act of processing under the authority of a controller or processor as stipulated in UK GDPR Article 29.

A. Each processor and, where applicable, the processors representative shall maintain a record of all categories of processing activities earned out on behalf of a controller.
B. The processor shall consult the supervisory authority prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the processor to mitigate the risk.
C. A processor shall not process those data except on instructions from the controller, unless required to do so by domestic law
D. The processor shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed.

問題 #5

You are a consulting Data Protection Officer (DPO) for a holiday resort You have been asked to conduct a Data Protection Impact Assessment (DPIA) for them in advance of adopting a new HR management database.
While working through the DPIA, which of the following is NOT a requirement?

A. Identify measures to mitigate the risks
B. Publish any potential risks in your information notice.
C. Describe the processing
D. Sign off and record outcomes.

問題與答案：