Expert - Consent & Preference Management
Which one of the following can be a status of a purpose? 'Deleted' 'Archived' 'Active' 'Versioned'
'Active'
What should contain the header "Content-Type" of the API calls? 'Application/Javascript' 'Application/Json' 'Application/XML' 'Text/ Plain'
'Application/Json'
What is the status of a purpose before being published? 'Draft' 'Not Published'
'Draft'
The template used to import consent is called? 'Create / Update Data Subject Consents' 'Import Consent Transactions'
'Import Consent Transactions'
Which one of the following could be described as a purpose? 'Main Website webform' 'Managing Sign-up'
'Managing Sign-up'
Which e-mails can a Preference Center automatically send? A first-time login email A double opt-in email A changes confirmation email A confirmation of un-subscription email
All
You can export the report in: CSV Excel PDF XML
All
What should be first created in the integration menu before using the API calls from our developer portal? A Bearer Token A Site Admin API user An API Key A user-generated password
An API Key
What is a Magic Link? The default link towards the preference Centre An individualised link towards the Preference Centre for a specific Data Subject A link a Data Subject can use to directly withdraw all its consents
An individualised link towards the Preference Centre for a specific Data Subject
Workflows are created under what tab in the integrations module? Collection Points Custom Preferences Connections Credentials
Connections
In which sections can you retrieve the consents of the data subjects? Consents Transactions Reports Data Subjects
Consents Data Subjects
What should you do if a purpose is changing over time? Deleting the existing purpose and creating a new one Create a topic to highlight the changes Create a new version of the purpose
Create a new version of the purpose
What can now be used instead of topics, for more granularity in the consent? Privacy Notices Privacy Policies Custom Preferences
Custom Preferences
Which of the following are optional when creating a collection point? Purposes Data Elements Consent Interaction Type Data Subject Identifier
Data Elements
What is the name of the feature that sends a confirmation e-mail after the consent has been given and confirmed? Double Opt-In Consent Confirmation Email Consent Acknowledgement Email Consent Proof Email
Double Opt-In
What is the most commonly used Data Subject Identifier? Phone Number First name & last name Email address An OneTrust generated user ID
Email address
When it comes to the bulk import of consent, which files are supported? PDF Word documents Excel files XML files
Excel files
The Double Opt-In feature allows the ability to keep track of the Not Given consents? True False
F
Pre-checked boxes and/or silence constitute consent under the GDPR. True False
F "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." The Court also stated that the GDPR requires that users provide an "unambiguous indication" of consent
Which of the following correctly defines the legal requirements of consent under the GDPR? Opt-in, opt-out, explicit Reasonable, executable, accountable, demonstrative Freely-given, specific, informed, unambiguous
Freely-given, specific, informed, unambiguous
What are Custom Preferences used for? Frequency of newsletters Medium of communication Topics of newsletters
Frequency of newsletters Medium of communication
Which programming language would you find in the 'SDK' tab of the Collection Point? HTML + JavaScript Java PHP CSS
HTML + JavaScript
Which of the following would be a consideration when choosing whether to create an additional purpose or custom preferences? How do you want the data to be displayed in your data subject reporting? Which systems rely on the updated consent to function? What do you want the user interface to be within your Preference Center?
How do you want the data to be displayed in your data subject reporting? What do you want the user interface to be within your Preference Center?
Where would you find the option to turn on "Hosted SDK" or "Double Opt-In" feature? In the 'Details' tab of the Collection Point In the 'Settings' tab of the Collection Point In the 'Options' tab of the Collection Point In the 'Features' tab of the Collection Point
In the 'Settings' tab of the Collection Point
What is one advantage of a Preference Center Magic Link? It records the browser history of when a data subject updates consent. It allows a specific user to access the Preference Center without logging in. It does not require a workflow integration to be built
It allows a specific user to access the Preference Center without logging in. You can provide the second link directly to a specific Data Subject so he can access his preference center without login. The tokenid piece is individual and retrievable via API
Freemarker is a _______ template-based language? Java C++ C# Python
Java
Is it mandatory to capture additional data elements when creating a collection point? Yes No
No
Where can you withdraw a consent on behalf of someone? On the purpose page On the related transaction On the Data Subject profile
On the Data Subject profile
Which of the following is NOT a Consent method or call that can be performed? POST GET DELETE PUSH
PUSH
What needs to be created before a Collection Point? Preference centres Data Elements Purposes Reports
Purposes
The Custom Preferences are directly linked to? Reports Purposes Collection Points preference Centres
Purposes?
What is the description of the interaction type "Opt-In Checkbox + Form submission"? Submitting the webform creates consent for all the associated purposes Submitting the webform creates consent for all the associated purposes if the checkbox is checked Submitting the webform creates consent for all the associated purposes if the checkbox is cleared
Submitting the webform creates consent for all the associated purposes if the checkbox is checked
What is the description of the interaction type "form submission only"? Submitting the webform creates consent for all the associated purposes. Submitting the webform creates consent for all the associated purposes if the checkbox is checked Submitting the webform creates consent for all the associated purposes if the checkbox is cleared
Submitting the webform creates consent for all the associated purposes.
True or False: Magic Links expire. True False
T
The API call payload for the initial creation of consent is found in: The Developer Portal The OneTrust user guide The Integrations tab of the related collection point
The Integrations tab of the related collection point
What should be passed in the payload? The Purpose names The Purpose IDs
The Purpose IDs
When making an API call, what is the payload? The response of whether a call was successful or has failed. The actual data that you wish to send. The endpoint of where the call is taking place. The actions performed on Consent in the second application.
The actual data that you wish to send.
What would best describe a collection point? The entry point of the consent The reason why the consent is collected
The entry point of the consent
By default, which attribute of your checkboxes should contain the name of your purposes? Their IDs Their Values Their Classes Their Names
Their Values
What is the best use case for collection point type: "Data Subject Request"? To be used for the webforms on which data subjects are requested their data to be deleted. To be used when consent is pushed from ticketing systems such as Zendesk or Jira. This type of collection point does not exist
To be used for the webforms on which data subjects are requested their data to be deleted.
A Custom Preference can be linked to several purposes? True False
True
A web form collection point cannot be called through an API. True False
True if your collection point is a webform and you want to integrate with JavaScript.
Which collection point type would be the best if you need to push consent from an external system such as Salesforce? Web Form API Mobile CRM
Web Form
Which can be a type of Collection Point? Web form API Mobile
Web form API
You can decide to give the option to opt-out to OneTrust's automated e-mails. Yes No
Y
What is the format accepted for the date of the consent, during a bulk import? DD/MM/YYYY HH:MM:SS YYYY-MM- DD HH:MM:SS HH:MM:SS | DD/MM/YYYY
YYYY-MM- DD HH:MM:SS
Is it possible to set up labels / translations for the purposes? Yes, via the topics tab Yes, via the supported languages tab Yes, via the report tab No
Yes, via the supported languages tab
What is mandatory in order to manage several languages in a Preference Centre? Nothing You need to create the various translations within the preference Centre translation tab You need to define the various translation for the purposes you want to display, on the purposes themselves
You need to define the various translation for the purposes you want to display, on the purposes themselves
Which attribute of the SDK should refer to the text-box containing your data subject identifier? 'identifierID' 'EmailID' 'DataSubjectID' 'TextboxID'
identifierid?
Which one is not a status acceptable for a consent transaction? Active Pending Removed Not Given
pending