Data Governance And Security

To comply with CCPA, an organization must track the 'Right to Know' requests. Which component of a Data Governance Framework is most relevant?

Which access control model should be implemented to ensure that a user can only access files based on their specific job role?

An administrator needs to restrict access to a specific S3 bucket so that only the Finance team can view files. Which configuration is the most effective approach?

An organization is migrating sensitive financial records to a cloud environment. Which security control ensures that only authorized applications can decrypt the data?

A company subject to GDPR needs to ensure that user data is deleted upon request across all distributed nodes in a NoSQL cluster. Which process is most critical to demonstrate compliance?

A data analyst discovers that raw log files contain unmasked social security numbers. Which data governance practice should be implemented immediately to remediate the risk?

A database administrator needs to implement column-level encryption for sensitive PII in a SQL Server environment. Which tool should be used to ensure the encryption keys are managed outside the database engine?

A company needs to audit all administrative actions taken on their database server. Which feature should the DBA enable?

Which technology provides the best protection against data exfiltration from an on-premises database by a rogue administrator?

What is the primary purpose of a Data Protection Impact Assessment (DPIA) under GDPR?

In a multi-tenant cloud database, which mechanism ensures that tenant A cannot see data belonging to tenant B?

A developer wants to use a subset of production data for testing. Which method ensures the test data retains its structure while protecting privacy?

Which document outlines the 'Data Owner' responsibilities in a data governance framework?

Which protocol should be enforced for all data-in-transit between application servers and database instances?

An administrator needs to enforce password complexity on the database level. Where should this policy be configured?

A company is using a cloud-based data lake. To satisfy data sovereignty requirements, they must ensure data remains in a specific region. How can this be enforced?

Which action represents a 'Data Lifecycle' phase where data is safely removed?

When decommissioning a legacy server, what is the most secure way to handle the hard drives containing sensitive data?

A company needs to implement centralized identity management for all database administrators. Which service is appropriate?

To ensure non-repudiation in a database system, what must be captured for every transaction?

What is the first step in a Data Governance program?

Which type of data is defined as 'sensitive' and usually requires enhanced protection?

An administrator needs to restrict a user's ability to see only rows where the 'Region' column is 'North'. What feature should be used?

A company requires that all database backups be immutable for 7 years to meet regulatory audits. How can this be achieved?

Which of the following is a common symptom of a broken access control mechanism in a database?

Which regulatory act specifically governs the protection of healthcare-related data?

An organization uses a 'bring your own key' (BYOK) model for database encryption. What is the primary benefit?

When reviewing a database security configuration, which finding poses the highest risk?

Which THREE actions should be performed during a data incident response procedure involving a potential PII leak?

A security team is implementing an access management strategy. Which THREE of the following are considered essential components of an effective Identity and Access Management (IAM) framework?

A company is conducting a data governance audit. Which TWO of the following items should be verified to ensure proper data security?

Which THREE of the following are recognized data governance best practices?

Which TWO actions constitute good data lifecycle management?

Which TWO technologies or methods are most effective at protecting sensitive data against insider threats?

When assessing data privacy compliance, which THREE categories of data are typically protected under laws like CCPA or GDPR?

Which THREE of the following are valid methods for securing cloud-based data storage?

Which TWO controls are necessary to maintain the integrity of a data warehouse?

Which THREE elements are essential when configuring Database Activity Monitoring (DAM)?

Which TWO of the following are common administrative tasks in a Data Governance program?

An organization must ensure that PII in a legacy SQL Server database is masked before being accessed by the HR analytics team. Which SQL Server feature should the DBA implement to ensure the data is obscured at the query level without changing the underlying storage?

You are implementing a data governance framework. Which role is primarily responsible for ensuring that the data quality, security, and lifecycle policies are defined and adhered to for a specific business domain?

A company is migrating to a cloud data warehouse and must comply with CCPA requirements for data portability. Which action is necessary to ensure compliance regarding user access requests?

A data engineer is configuring an S3 bucket to comply with GDPR requirements regarding the 'Right to be Forgotten.' Which combination of configuration settings best automates the lifecycle of user-specific data objects that have reached the end of their retention period?

Your organization uses Azure Active Directory for access management. You need to ensure that database administrators can only access a specific production Azure SQL instance during a scheduled 4-hour maintenance window. Which control is most appropriate?

Which document is essential to establish the legal basis for processing personal data under GDPR between a controller and a processor?

You are auditing data security controls. You find that raw sensitive data is being written to application logs by the ETL process. Which remediation step best aligns with the principle of 'Data Minimization'?

Which TWO of the following are recognized components of a mature Data Governance framework? (Select TWO)

You are evaluating the data lifecycle of an organization's unstructured data. Which THREE actions should be included in a robust Data Retention and Disposal policy? (Select THREE)

As a Data Privacy Officer, you are reviewing technical controls for data security. Which TWO of the following are best practices to ensure 'Privacy by Design' in a new application? (Select TWO)