Free Global Professional in Human Resources (GPHR) Global Risk and Compliance Questions and Answers — Questions and Answers
Question 1: A U.S.-based multinational corporation (MNE) stores employee data from its French subsidiary on servers located in the United States. Which of the following is the primary compliance obligation under the General Data Protection Regulation (GDPR) that the company must address for this cross-border data transfer?
- Notifying the U.S. Department of Labor about the data storage.
- Ensuring an adequate data protection mechanism, such as Standard Contractual Clauses (SCCs), is in place. (Correct answer)
- Translating all employee data into English for consistency.
- Deleting all data after a one-year period, regardless of business need.
Correct answer: Ensuring an adequate data protection mechanism, such as Standard Contractual Clauses (SCCs), is in place.
The EU's GDPR imposes strict rules on transferring the personal data of its residents outside the European Economic Area (EEA). Because the U.S. is not considered by the EU to have an adequate level of data protection, the MNE must use a specific legal mechanism, like Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs), to legally transfer the data and ensure it remains protected to EU standards.
Question 2: Which of the following actions by an employee of a U.S. company operating abroad would MOST likely constitute a violation of the U.S. Foreign Corrupt Practices Act (FCPA)?
- Providing a small 'grease payment' to a customs official to expedite the routine processing of a legal shipment.
- Paying for the reasonable travel expenses of a foreign official to visit a company facility for a legitimate business demonstration.
- Offering a significant cash payment to a foreign government minister to secure a large government contract. (Correct answer)
- Sponsoring a local community sporting event as a gesture of corporate social responsibility.
Correct answer: Offering a significant cash payment to a foreign government minister to secure a large government contract.
The FCPA's anti-bribery provisions specifically prohibit offering anything of value to a foreign official to obtain or retain business. Offering a cash payment to a minister to win a contract is a direct and clear violation. While 'grease payments' are a narrow exception (and illegal under many local laws), and bona fide business expenses are permissible, a direct payment to influence a contract award is the primary target of the act.
Question 3: A global HR professional is tasked with establishing a global risk management framework. What is the critical initial step in this process?
- Purchasing a comprehensive global insurance policy to cover all operations.
- Developing emergency medical and security evacuation plans for all high-risk locations.
- Identifying and categorizing potential risks across all areas of global operations. (Correct answer)
- Training all expatriate staff on crisis management protocols and procedures.
Correct answer: Identifying and categorizing potential risks across all areas of global operations.
The foundation of any effective risk management framework is risk identification. Before mitigation strategies (like insurance), response plans (like evacuations), or training can be effectively developed, the organization must first perform a comprehensive assessment to understand the full spectrum of potential risks it faces, including legal, operational, security, financial, and reputational risks.
Question 4: An expatriate employee in a politically unstable region is the victim of a carjacking, resulting in no physical injury but significant emotional distress. Beyond ensuring immediate physical safety, what is the MOST critical next step for the company to fulfill its duty of care?
- Immediately filing a claim with the company's global insurance provider.
- Arranging for immediate access to professional counseling and psychological support. (Correct answer)
- Conducting a formal investigation to determine if the employee was at fault.
- Transferring the employee to a new country assignment within 24 hours.
Correct answer: Arranging for immediate access to professional counseling and psychological support.
An employer's duty of care extends beyond physical safety to encompass the mental and emotional well-being of its employees. After a traumatic event, providing immediate access to professional counseling is a critical component of fulfilling this duty, addressing the potential for post-traumatic stress disorder (PTSD) and other stress-related issues.
Question 5: A U.S.-based technology firm is planning a significant workforce reduction at its subsidiary in Germany. To remain compliant, the firm's primary obligation is to:
- provide a severance package that is equivalent to U.S. corporate standards.
- gain pre-approval from the U.S. Department of Labor before proceeding.
- notify the local German media at least 30 days in advance of the layoffs.
- consult with the established works council to negotiate a 'social plan'. (Correct answer)
Correct answer: consult with the established works council to negotiate a 'social plan'.
German labor law mandates a system of co-determination, giving works councils (Betriebsrat) significant rights. For major operational changes like mass layoffs, management is legally required to inform and consult with the works council. The objective is typically to negotiate a 'social plan' (Sozialplan) that outlines compensation, retraining, and other measures to mitigate the negative consequences for the affected employees.
Question 6: From a global human resources and compliance perspective, what is the primary purpose of implementing a supplier code of conduct?
- To guarantee the lowest possible cost for raw materials from all suppliers.
- To ensure that third-party partners adhere to the company's ethical standards regarding labor practices and human rights. (Correct answer)
- To transfer all legal liability for compliance violations to the supplier.
- To standardize the invoicing and payment processes for all global vendors.
Correct answer: To ensure that third-party partners adhere to the company's ethical standards regarding labor practices and human rights.
A supplier code of conduct is a critical tool for managing reputational, ethical, and legal risks within a company's global supply chain. Its primary purpose is to clearly communicate the company's expectations to its suppliers and partners regarding fair labor practices, workplace safety, prohibition of child or forced labor, and compliance with all applicable laws, thereby protecting the company's brand and ensuring ethical sourcing.
Free Global Professional in Human Resources (GPHR) Global Risk and Compliance Questions and Answers
A U.S.-based multinational corporation (MNE) stores employee data from its French subsidiary on servers located in the United States.
Which of the following is the primary compliance obligation under the General Data Protection Regulation (GDPR) that the company must address for this cross-border data transfer?
What Practice Test Geeks adds beyond an AI chat for GPHR
An AI chatbot can quiz you, but it can't reproduce the exam conditions or keep your record. Here you get:
- A timed, full-length GPHR mock exam — 165 questions in 180 minutes with a 70% pass mark, modeled on the official exam's question count and time limit, followed by a score report broken down by exam domain.
- A fixed GPHR question bank: the same test every attempt, so your score is comparable from one try to the next instead of changing with every regenerated quiz.
- Progress saved on your device: completed tests, scores and missed questions stay in My Progress, so you can retake only what you got wrong.
- A printable GPHR cheat sheet you can print or save as a PDF.
- GPHR flashcards built from the same question bank.