Expert - Consent & Preference Management

Which one of the following can be a status of a purpose? 'Deleted' 'Archived' 'Active' 'Versioned'

'Active'

What should contain the header "Content-Type" of the API calls? 'Application/Javascript' 'Application/Json' 'Application/XML' 'Text/ Plain'

'Application/Json'

What is the status of a purpose before being published? 'Draft' 'Not Published'

'Draft'

The template used to import consent is called? 'Create / Update Data Subject Consents' 'Import Consent Transactions'

'Import Consent Transactions'

Which one of the following could be described as a purpose? 'Main Website webform' 'Managing Sign-up'

'Managing Sign-up'

Which e-mails can a Preference Center automatically send? A first-time login email A double opt-in email A changes confirmation email A confirmation of un-subscription email

All

You can export the report in: CSV Excel PDF XML

All

What should be first created in the integration menu before using the API calls from our developer portal? A Bearer Token A Site Admin API user An API Key A user-generated password

An API Key

What is a Magic Link? The default link towards the preference Centre An individualised link towards the Preference Centre for a specific Data Subject A link a Data Subject can use to directly withdraw all its consents

An individualised link towards the Preference Centre for a specific Data Subject

Workflows are created under what tab in the integrations module? Collection Points Custom Preferences Connections Credentials

Connections

In which sections can you retrieve the consents of the data subjects? Consents Transactions Reports Data Subjects

Consents Data Subjects

What should you do if a purpose is changing over time? Deleting the existing purpose and creating a new one Create a topic to highlight the changes Create a new version of the purpose

Create a new version of the purpose

What can now be used instead of topics, for more granularity in the consent? Privacy Notices Privacy Policies Custom Preferences

Custom Preferences

Which of the following are optional when creating a collection point? Purposes Data Elements Consent Interaction Type Data Subject Identifier

Data Elements

What is the name of the feature that sends a confirmation e-mail after the consent has been given and confirmed? Double Opt-In Consent Confirmation Email Consent Acknowledgement Email Consent Proof Email

Double Opt-In

What is the most commonly used Data Subject Identifier? Phone Number First name & last name Email address An OneTrust generated user ID

Email address

When it comes to the bulk import of consent, which files are supported? PDF Word documents Excel files XML files

Excel files

The Double Opt-In feature allows the ability to keep track of the Not Given consents? True False

F

Pre-checked boxes and/or silence constitute consent under the GDPR. True False

F "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." The Court also stated that the GDPR requires that users provide an "unambiguous indication" of consent

Which of the following correctly defines the legal requirements of consent under the GDPR? Opt-in, opt-out, explicit Reasonable, executable, accountable, demonstrative Freely-given, specific, informed, unambiguous

Freely-given, specific, informed, unambiguous

What are Custom Preferences used for? Frequency of newsletters Medium of communication Topics of newsletters

Frequency of newsletters Medium of communication

Which programming language would you find in the 'SDK' tab of the Collection Point? HTML + JavaScript Java PHP CSS

HTML + JavaScript

Which of the following would be a consideration when choosing whether to create an additional purpose or custom preferences? How do you want the data to be displayed in your data subject reporting? Which systems rely on the updated consent to function? What do you want the user interface to be within your Preference Center?

How do you want the data to be displayed in your data subject reporting? What do you want the user interface to be within your Preference Center?

Where would you find the option to turn on "Hosted SDK" or "Double Opt-In" feature? In the 'Details' tab of the Collection Point In the 'Settings' tab of the Collection Point In the 'Options' tab of the Collection Point In the 'Features' tab of the Collection Point

In the 'Settings' tab of the Collection Point

What is one advantage of a Preference Center Magic Link? It records the browser history of when a data subject updates consent. It allows a specific user to access the Preference Center without logging in. It does not require a workflow integration to be built

It allows a specific user to access the Preference Center without logging in. You can provide the second link directly to a specific Data Subject so he can access his preference center without login. The tokenid piece is individual and retrievable via API

Freemarker is a _______ template-based language? Java C++ C# Python

Java

Is it mandatory to capture additional data elements when creating a collection point? Yes No

No

Where can you withdraw a consent on behalf of someone? On the purpose page On the related transaction On the Data Subject profile

On the Data Subject profile

Which of the following is NOT a Consent method or call that can be performed? POST GET DELETE PUSH

PUSH

What needs to be created before a Collection Point? Preference centres Data Elements Purposes Reports

Purposes

The Custom Preferences are directly linked to? Reports Purposes Collection Points preference Centres

Purposes?

What is the description of the interaction type "Opt-In Checkbox + Form submission"? Submitting the webform creates consent for all the associated purposes Submitting the webform creates consent for all the associated purposes if the checkbox is checked Submitting the webform creates consent for all the associated purposes if the checkbox is cleared

Submitting the webform creates consent for all the associated purposes if the checkbox is checked

What is the description of the interaction type "form submission only"? Submitting the webform creates consent for all the associated purposes. Submitting the webform creates consent for all the associated purposes if the checkbox is checked Submitting the webform creates consent for all the associated purposes if the checkbox is cleared

Submitting the webform creates consent for all the associated purposes.

True or False: Magic Links expire. True False

T

The API call payload for the initial creation of consent is found in: The Developer Portal The OneTrust user guide The Integrations tab of the related collection point

The Integrations tab of the related collection point

What should be passed in the payload? The Purpose names The Purpose IDs

The Purpose IDs

When making an API call, what is the payload? The response of whether a call was successful or has failed. The actual data that you wish to send. The endpoint of where the call is taking place. The actions performed on Consent in the second application.

The actual data that you wish to send.

What would best describe a collection point? The entry point of the consent The reason why the consent is collected

The entry point of the consent

By default, which attribute of your checkboxes should contain the name of your purposes? Their IDs Their Values Their Classes Their Names

Their Values

What is the best use case for collection point type: "Data Subject Request"? To be used for the webforms on which data subjects are requested their data to be deleted. To be used when consent is pushed from ticketing systems such as Zendesk or Jira. This type of collection point does not exist

To be used for the webforms on which data subjects are requested their data to be deleted.

A Custom Preference can be linked to several purposes? True False

True

A web form collection point cannot be called through an API. True False

True if your collection point is a webform and you want to integrate with JavaScript.

Which collection point type would be the best if you need to push consent from an external system such as Salesforce? Web Form API Mobile CRM

Web Form

Which can be a type of Collection Point? Web form API Mobile

Web form API

You can decide to give the option to opt-out to OneTrust's automated e-mails. Yes No

Y

What is the format accepted for the date of the consent, during a bulk import? DD/MM/YYYY HH:MM:SS YYYY-MM- DD HH:MM:SS HH:MM:SS | DD/MM/YYYY

YYYY-MM- DD HH:MM:SS

Is it possible to set up labels / translations for the purposes? Yes, via the topics tab Yes, via the supported languages tab Yes, via the report tab No

Yes, via the supported languages tab

What is mandatory in order to manage several languages in a Preference Centre? Nothing You need to create the various translations within the preference Centre translation tab You need to define the various translation for the purposes you want to display, on the purposes themselves

You need to define the various translation for the purposes you want to display, on the purposes themselves

Which attribute of the SDK should refer to the text-box containing your data subject identifier? 'identifierID' 'EmailID' 'DataSubjectID' 'TextboxID'

identifierid?

Which one is not a status acceptable for a consent transaction? Active Pending Removed Not Given

pending